Vulnerabilities

TI-2024-11208 CVE-2024-12084 · GHSA-85h7-m8c3-v9wc

Rsync: heap buffer overflow in rsync due to improper checksum length handling

CRITICAL 87

A heap-based buffer overflow flaw was found in the rsync daemon.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.72514 Published 2025-01-15 Fixed in 3.4.1-2.el10 CWE-122

TI-2024-11211 CVE-2024-12087 · GHSA-9x68-7qq6-v523

HIGH 66

A path traversal vulnerability exists in rsync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02259 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.0.6-12.el6_10.2 +11 CWE-22

TI-2024-11212 CVE-2024-12088 · GHSA-ffph-g3pc-8r3g

HIGH 66

A flaw was found in rsync.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04646 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.1.3-21.el8_10 +2 CWE-22

TI-2024-11210 CVE-2024-12086 · GHSA-82c6-8mfc-c23h

MEDIUM 63

A flaw was found in rsync.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.01789 Published 2025-01-14 Partial fix · 3.4.1-2.el10, 3.2.5-7.el9_8 +2 CWE-390

TI-2024-11209 CVE-2024-12085 · GHSA-xh5q-pch5-g3xq

HIGH 72

A flaw was found in rsync which could be triggered when rsync compares file checksums.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08641 Published 2025-01-14 Fixed in 3.4.1-2.el10, 3.0.6-12.el6_10.1 +209 CWE-908

TI-2024-05929 CVE-2024-6387 · GHSA-2x8c-95vh-gfv4

HIGH 82

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.99506 Published 2024-07-01 Partial fix · 8.7p1-38.el9_4.1, 8.7p1-12.el9_0.1 +5 CWE-364