by Kastro CVE-2024-12084
Red Hat Red Hat Enterprise Linux 10 — Rsync: heap buffer overflow in rsync due to improper checksum length handling
Description · from the CVE record
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Affected
ProductAffectedFixed inSource
rsync3.2.7–CNA
rsync3.3.0–CNA
Red Hat Enterprise Linux 10see advisory0:3.4.1-2.el10CNA
Red Hat Enterprise Linux 6see advisory–CNA
Red Hat Enterprise Linux 7see advisory–CNA
Red Hat Enterprise Linux 8see advisory–CNA
Red Hat Enterprise Linux 9see advisory–CNA
Red Hat OpenShift Container Platform 4see advisory–CNA
Red Hat OpenShift Container Platform 4see advisory–CNA
Scores by source
redhat (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total