All vulnerabilities

Servers and applications

CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed…

Severity
Medium 6.8
Published
14 Jan 2025
Last changed
5 Nov 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
rsyncServers and applications · cpe:a:samba:rsync
  • Every version up to 3.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-12086
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-12086