Summary
Danilo Ramos discovered that rsync incorrectly handled memory when
performing certain zlib deflating operations. An attacker could use this
issue to cause rsync to crash, resulting in a denial of service, or
possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | rsync | 3.1.2-2.1ubuntu1.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | rsync | 3.1.3-8ubuntu0.3 |
Vulnerabilities 1
-
High 7.5
Nokogiri affected by zlib's Out-of-bounds Write vulnerability
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
References
-
report
https://ubuntu.com/security/CVE-2018-25032