NetSight
IP …
high7.5

CVE-2024-12085

A flaw was found in rsync which could be triggered when rsync compares file checksums.

Impact

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

Affected products

VendorProductAffected versions
SambaRsync
before 3.3.0
RedhatOpenshift
Version 5.0
RedhatOpenshift Container Platform
Versions 4.12, 4.13, 4.14, 4.15, 4.16, 4.17
RedhatEnterprise Linux
Versions 8.0, 9.0
RedhatEnterprise Linux Eus
Versions 8.8, 9.2, 9.4, 9.6
RedhatEnterprise Linux For Arm 64
Versions 8.0_aarch64, 9.0_aarch64, 9.2_aarch64
RedhatEnterprise Linux For Arm 64 Eus
Versions 8.8_aarch64, 9.4_aarch64, 9.6_aarch64
RedhatEnterprise Linux For Ibm Z Systems
Versions 8.0_s390x, 9.0_s390x, 9.2_s390x
RedhatEnterprise Linux For Ibm Z Systems Eus
Versions 8.8_s390x, 9.4_s390x, 9.6_s390x
RedhatEnterprise Linux For Power Little Endian
Versions 8.0_ppc64le, 8.8_ppc64le, 9.0_ppc64le, 9.2_ppc64le
RedhatEnterprise Linux For Power Little Endian Eus
Versions 9.4_ppc64le, 9.6_ppc64le
RedhatEnterprise Linux Server
Versions 6.0, 7.0

Weakness classification

CWE-908

References