https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:29:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00378 bdu:2025-00378 https://cve.radiocsirt.org/vuln/bdu:2025-00378 https://cve.radiocsirt.org/vuln/bell-cve-2024-12084 <p><strong>Affected:</strong> Alpaquita:23: rsync, Alpaquita:stream: rsync</p> <p><strong>Affected:</strong> Alpaquita:23: rsync, Alpaquita:stream: rsync</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-12084 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0067 certfr-2025-avi-0067 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0067 https://cve.radiocsirt.org/vuln/euvd-2026-331180 EUVD-2026-331180 https://cve.radiocsirt.org/vuln/euvd-2026-331180 https://cve.radiocsirt.org/vuln/fkie_cve-2024-12084 <p>A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.</p> <p>A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-12084 https://cve.radiocsirt.org/vuln/ghsa-85h7-m8c3-v9wc <p>A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.</p> <p>A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.</p> https://cve.radiocsirt.org/vuln/ghsa-85h7-m8c3-v9wc https://cve.radiocsirt.org/vuln/msrc_cve-2024-12084 msrc_CVE-2024-12084 https://cve.radiocsirt.org/vuln/msrc_cve-2024-12084 https://cve.radiocsirt.org/vuln/oesa-2025-1061 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: rsync</p> <p>Rsync is an open source utility that provides fast incremental file transfer. It uses the &amp;quot;rsync algorithm&amp;quot; which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand. Security Fix(es): (CVE-2024-12084) (CVE-2024-12085) (CVE-2024-12086) (CVE-2024-12087) (CVE-2024-12088) (CVE-2024-12747)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: rsync</p> <p>Rsync is an open source utility that provides fast incremental file transfer. It uses the &amp;quot;rsync algorithm&amp;quot; which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand. Security Fix(es): (CVE-2024-12084) (CVE-2024-12085) (CVE-2024-12086) (CVE-2024-12087) (CVE-2024-12088) (CVE-2024-12747)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1061 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14665-1 <p>rsync-3.4.1-1.1 on GA media</p> <p>rsync-3.4.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14665-1 https://cve.radiocsirt.org/vuln/suse-su-2025:0156-1 <p>Security update for rsync</p> <p>Security update for rsync</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0156-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12084 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: rsync, Ubuntu:24.04:LTS: rsync</p> <p>A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: rsync, Ubuntu:24.04:LTS: rsync</p> <p>A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-12084 https://cve.radiocsirt.org/vuln/vde-2025-053 <p>Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools</p> <p>Coreutils: heap overflow in split --line-bytes with very long lines Unprivileged overlay + shiftfs read access Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file SSL_select_next_proto buffer overread Remote Code Execution in pypa/setuptools</p> https://cve.radiocsirt.org/vuln/vde-2025-053 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0084 <p>Ein Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um vertrauliche Informationen preiszugeben, sich erhöhte Rechte zu verschaffen und Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Rsync ausnutzen, um vertrauliche Informationen preiszugeben, sich erhöhte Rechte zu verschaffen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0084