← לוח פגיעויות

CVE-2024-12085

גבוהה 7.5

תיאור (מקור, אנגלית)

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

מדדים

CVSS 3.1
7.5 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS — סבירות ניצול
9% (אחוזון 100) נכון ל-26/7/2026
CWE
CWE-908

מוצרים מושפעים

samba: rsync; redhat: openshift; redhat: openshift container platform; redhat: enterprise linux; redhat: enterprise linux eus; redhat: enterprise linux for arm 64; redhat: enterprise linux for arm 64 eus; redhat: enterprise linux for ibm z systems; redhat: enterprise linux for ibm z systems eus; redhat: enterprise linux for power little endian; redhat: enterprise linux for power little endian eus; redhat: enterprise linux server; redhat: enterprise linux server aus; redhat: enterprise linux server for power little endian update services for sap solutions; redhat: enterprise linux server tus

קישורים