7.5

CVE-2024-12085

Exploit

Rsync: info leak via uninitialized stack contents

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samba ≫ Rsync Version < 3.3.0
Redhat ≫ Openshift Version 5.0
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Enterprise Linux Eus Version 8.8
Redhat ≫ Enterprise Linux Eus Version 9.2
Redhat ≫ Enterprise Linux Eus Version 9.4
Redhat ≫ Enterprise Linux Eus Version 9.6
Redhat ≫ Enterprise Linux For Arm 64 Version 8.0_aarch64
Redhat ≫ Enterprise Linux For Arm 64 Version 9.0_aarch64
Redhat ≫ Enterprise Linux For Arm 64 Version 9.2_aarch64
Redhat ≫ Enterprise Linux For Arm 64 Eus Version 8.8_aarch64
Redhat ≫ Enterprise Linux For Arm 64 Eus Version 9.4_aarch64
Redhat ≫ Enterprise Linux For Arm 64 Eus Version 9.6_aarch64
Almalinux ≫ Almalinux Version 8.0 Update -
Almalinux ≫ Almalinux Version 9.0 Update -
Almalinux ≫ Almalinux Version 10.0 Update -
Archlinux ≫ Arch Linux Version -
Gentoo ≫ Linux Version -
Nixos ≫ Nixos Version < 24.11
Suse ≫ Suse Linux Version -
Tritondatacenter ≫ Smartos Version < 20250123
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.82% 0.947
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://bugzilla.redhat.com/show_bug.cgi?id=2330539
Third Party Advisory
Issue Tracking
https://kb.cert.org/vuls/id/952657
Third Party Advisory
https://security.netapp.com/advisory/ntap-20250131-0002/
https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html
https://www.kb.cert.org/vuls/id/952657
https://access.redhat.com/errata/RHSA-2025:21885
https://access.redhat.com/errata/RHSA-2025:2701
Third Party Advisory
https://access.redhat.com/errata/RHSA-2024:6122
https://access.redhat.com/errata/RHBA-2025:6470
https://access.redhat.com/errata/RHSA-2025:0324
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0325
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0637
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0688
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0714
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0774
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0787
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0790
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0849
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0884
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0885
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1120
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1123
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1128
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1225
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1227
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1242
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:1451
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-12085
Third Party Advisory
https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj
Third Party Advisory
Exploit