https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:14:55 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-214920 EUVD-2026-214920 https://cve.radiocsirt.org/vuln/euvd-2026-214920 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3978 <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3978 https://cve.radiocsirt.org/vuln/ghsa-3pqh-p72c-fj85 <p><strong>Affected:</strong> Go: github.com/cloudflare/cfrpki</p> <p>### Impact</p> <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root (https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> <p>## For more information</p> <p>If you have any questions or comments about this advisory email us at security@cloudflare.com</p> <p><strong>Affected:</strong> Go: github.com/cloudflare/cfrpki</p> <p>### Impact</p> <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root (https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> <p>## For more information</p> <p>If you have any questions or comments about this advisory email us at security@cloudflare.com</p> https://cve.radiocsirt.org/vuln/ghsa-3pqh-p72c-fj85 https://cve.radiocsirt.org/vuln/gsd-2021-3978 gsd-2021-3978 https://cve.radiocsirt.org/vuln/gsd-2021-3978 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3978 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: cfrpki</p> <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: cfrpki</p> <p>When copying files with rsync, octorpki uses the &#34;-a&#34; flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root ( https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service ) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3978