Logo
vulnerabilityCVE-2024-12085
Name
CVE-2024-12085
Source
NVD ( link)Debian ( link)
Description
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
rsync
Exploitable

Vulnerability Ratings#


7.5
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
3.4.4
Not Affected
buildroot
master
3.4.4
Not Affected
openwrt
master
3.4.4-r1
Not Affected
yocto
kirkstone
3.2.7
Exploitable
yocto
master
3.4.4
Not Affected