Red Hat Security Advisory

RHSA-2022:7793

rsync security and enhancement update

Released 2022-11-08 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 8) rsync-3.1.3-19.el8, rsync-daemon-3.1.3-19.el8

TI-2022-17498 CVE-2022-37434 · GHSA-cfmr-vrgj-vqwv

HIGH 75

zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.19243 Published 2022-08-05 Partial fix CWE-120