IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.8Kritik

CVE-2024-12084Rsync: heap buffer overflow in rsync due to improper checksum length handling

rsync; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7 Yayım: (1 yıl önce)

Açıklama

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.

Zayıflık türü (CWE): CWE-122CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
almalinux almalinux 10.0
archlinux arch linux —
gentoo linux —
nixos nixos < 24.11
novell suse linux —
redhat enterprise linux 10.0
Red Hat Red Hat Enterprise Linux 10 all versions
Red Hat Red Hat Enterprise Linux 6 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 —
Red Hat Red Hat Enterprise Linux 9 —
Red Hat Red Hat OpenShift Container Platform 4 —
samba rsync 3.2.7
tritondatacenter smartos < 20250123
— rsync 3.2.7, 3.3.0

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (10)
  • cpe:2.3:a:samba:rsync:3.2.7:-:*:*:*:*:*:*
  • cpe:2.3:a:samba:rsync:3.3.0:-:*:*:*:*:*:*
  • cpe:2.3:o:almalinux:almalinux:10.0:-:*:*:*:*:*:*
  • cpe:2.3:o:archlinux:arch_linux:-:*:*:*:*:*:*:*
  • cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*
  • cpe:2.3:o:nixos:nixos:*:*:*:*:*:*:*:* < 24.11
  • cpe:2.3:o:nixos:nixos:24.11:*:*:*:*:*:*:*
  • cpe:2.3:o:novell:suse_linux:-:*:*:*:*:*:*:*
  • cpe:2.3:o:tritondatacenter:smartos:*:*:*:*:*:*:*:* < 20250123
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*

Aynı üründe son açıklar — Red Hat Enterprise Linux

5.5Orta
CVE-2026-110330

Abrt: abrt: abrt-server trusts client-supplied pid= allowing unprivileged read of other processes' /proc environ

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. abrt-server trusts a client-supplied PID when creating problem dumps over abrt.socket and, running as root, copies that process's /proc data (including environ) into a dump directory owned by the connecting unprivileged user. This al…

7.8Yüksek
CVE-2026-110331

Abrt: abrt: incomplete cve-2026-54228/54229 fix — completeness gate bypassed via attacker-supplied count element

Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in abrt. The completeness check introduced to mitigate CVE-2026-54228 and CVE-2026-54229 only verifies that a dump directory contains a "count" element, which an unprivileged user can create. This allows a local attacker to bypass the guard a…