Description
Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | rsync | 2.6.8-1 | — |
| Debian 13 | rsync | 2.6.8-1 | — |
| Debian 12 | rsync | 2.6.8-1 | — |
References
- http://samba.anu.edu.au/ftp/rsync/rsync-2.6.8-NEWS
- GLSA-200605-05 vendor-advisory
- 19920 third-party-advisory
- 19964 third-party-advisory
- 2006-0024 vendor-advisory
- 20011 third-party-advisory
- ADV-2006-1606 vdb-entry
- rsync-xattr-overflow(26208) vdb-entry
- 17788 vdb-entry