PatchFirst · Vulnérabilités récentes
Vulnérabilité publiée pour rsync au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.
Vulnérabilités : 42
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.
Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.