Red Hat Bug Fix Advisory: rsync bug fix and enhancement update

Fixed packages 5

Vulnerabilities 6

• Critical 9.8
  CVE-2024-12084 Public exploit EPSS 73%

  Rsync: heap buffer overflow in rsync due to improper checksum length handling

  A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of b…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jan 15, 2025
• High 7.5
  CVE-2024-12085 Public exploit

  Rsync: info leak via uninitialized stack contents

  A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitializ…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Alpine
  Jan 14, 2025
• Medium 6.5
  CVE-2024-12087

  Rsync: path traversal vulnerability in rsync

  A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--i…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux Alpine
  Jan 14, 2025
• Medium 6.5
  CVE-2024-12088

  Rsync: --safe-links option bypass leads to path traversal

  A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jan 14, 2025
• Medium 6.1
  CVE-2024-12086

  Rsync: rsync server leaks arbitrary client files

  A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jan 14, 2025
• Medium 5.6
  CVE-2024-12747

  Rsync: race condition in rsync handling symbolic links

  A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Jan 14, 2025

References

• article
  https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/10/html/10.0_release_notes/index
• article
  https://issues.redhat.com/browse/RHEL-71293
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhba-2025_6470.json
• report
  https://access.redhat.com/security/cve/CVE-2024-12084
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2330527
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12084
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12084
• article
  https://kb.cert.org/vuls/id/952657
• report
  https://access.redhat.com/security/cve/CVE-2024-12085
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2330539
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12085
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12085
• report
  https://access.redhat.com/security/cve/CVE-2024-12086
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2330577
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12086
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12086
• report
  https://access.redhat.com/security/cve/CVE-2024-12087
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2330672
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12087
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12087
• report
  https://access.redhat.com/security/cve/CVE-2024-12088
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2330676
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12088
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12088
• report
  https://access.redhat.com/security/cve/CVE-2024-12747
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2332968
• advisory
  https://www.cve.org/CVERecord?id=CVE-2024-12747
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2024-12747