CVE-2024-12085
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
0 <= 3.3.0 | affected | ||
| Red Hat | Red Hat Enterprise Linux 10 | 0:3.4.1-2.el10 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | 0:3.0.6-12.el6_10.1 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | 0:3.1.2-12.el7_9.1 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8 | 0:3.1.3-20.el8_10 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | 0:3.1.3-7.el8_2.3 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 0:3.1.3-12.el8_4.3 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.4 Telecommunications Update Service | 0:3.1.3-12.el8_4.3 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | 0:3.1.3-12.el8_4.3 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:3.1.3-14.el8_6.6 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 0:3.1.3-14.el8_6.6 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 0:3.1.3-14.el8_6.6 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 8.8 Extended Update Support | 0:3.1.3-20.el8_8.1 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.2.3-20.el9_5.1 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 9 | 0:3.2.3-20.el9_5.1 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | 0:3.2.3-9.el9_0.3 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | 0:3.2.3-19.el9_2.1 < * | unaffected |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 0:3.2.3-19.el9_4.1 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.12 | 412.86.202502100314-0 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | 413.92.202503112237-0 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | 414.92.202502111902-0 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | 415.92.202501281917-0 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | v4.16.0-202501311735.p0.g2cb0020.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | v4.16.0-202501311933.p0.g4246d04.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | v4.16.0-202501311605.p0.g4246d04.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | 417.94.202502051822-0 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g838d248.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501281202.p0.g336d783.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g914783c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502010001.p0.g061909a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ge905646.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g526498a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ga371641.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502040032.p0.gc864494.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd352778.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g182471a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g700802f.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g314589c.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9 < * | unaffected |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | 418.94.202502100215-0 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-22 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-10 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v6.8.1-454 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-17 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v1.0.0-537 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-4 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v0.4.0-339 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-4 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v1.1.0-320 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.1-552 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v3.3.2-9 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-5 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-12 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v5.8.17-5 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v0.1.0-725 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v0.1.0-342 < * | unaffected |
| Red Hat | RHOL-5.8-RHEL-9 | v0.28.1-88 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v5.9.11-25 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v5.9.11-11 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v0.4.0-340 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v5.9.11-5 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v1.1.0-321 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v3.3.2-8 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v5.9.11-6 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v5.9.11-9 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v5.9.11-4 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v0.1.0-724 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v0.1.0-341 < * | unaffected |
| Red Hat | RHOL-5.9-RHEL-9 | v0.34.1-30 < * | unaffected |
| Red Hat | OpenShift Compliance Operator 1 | 1.8.0 < * | unaffected |
Weaknesses
- CWE-908: Use of Uninitialized Resource
Workarounds
Seeing as this vulnerability relies on information leakage coming from the presence of data in the uninitialized memory of the sum2 buffer, a potential mitigation involves compiling rsync with the -ftrivial-auto-var-init=zero option set. This mitigates the issue because it initializes the sum2 variable's memory with zeroes to prevent uninitialized memory disclosure.
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: poc
- Automatable: yes
- Technical Impact: partial
Additional References
CVE Program Container
Additional References
- https://security.netapp.com/advisory/ntap-20250131-0002/
- https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html
- https://www.kb.cert.org/vuls/id/952657
References
- https://access.redhat.com/errata/RHBA-2025:6470
- https://access.redhat.com/errata/RHSA-2024:6122
- https://access.redhat.com/errata/RHSA-2025:0324
- https://access.redhat.com/errata/RHSA-2025:0325
- https://access.redhat.com/errata/RHSA-2025:0637
- https://access.redhat.com/errata/RHSA-2025:0688
- https://access.redhat.com/errata/RHSA-2025:0714
- https://access.redhat.com/errata/RHSA-2025:0774
- https://access.redhat.com/errata/RHSA-2025:0787
- https://access.redhat.com/errata/RHSA-2025:0790
- https://access.redhat.com/errata/RHSA-2025:0849
- https://access.redhat.com/errata/RHSA-2025:0884
- https://access.redhat.com/errata/RHSA-2025:0885
- https://access.redhat.com/errata/RHSA-2025:1120
- https://access.redhat.com/errata/RHSA-2025:1123
- https://access.redhat.com/errata/RHSA-2025:1128
- https://access.redhat.com/errata/RHSA-2025:1225
- https://access.redhat.com/errata/RHSA-2025:1227
- https://access.redhat.com/errata/RHSA-2025:1242
- https://access.redhat.com/errata/RHSA-2025:1451
- https://access.redhat.com/errata/RHSA-2025:21885
- https://access.redhat.com/errata/RHSA-2025:2701
- https://access.redhat.com/security/cve/CVE-2024-12085
- https://bugzilla.redhat.com/show_bug.cgi?id=2330539
- https://kb.cert.org/vuls/id/952657
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.