Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2018-5764

Опубликовано: 17 янв. 2018
Источник: debian
EPSS Низкий

Описание

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
rsyncfixed3.1.2-2.2package

Примечания

  • https://git.samba.org/rsync.git/?p=rsync.git;a=commit;h=7706303828fcde524222babb2833864a4bd09e07

EPSS

Процентиль: 94%
0.06389
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 9 лет назад

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

CVSS3: 6.3
redhat
почти 9 лет назад

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

CVSS3: 7.5
nvd
почти 9 лет назад

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

suse-cvrf
больше 8 лет назад

Security update for rsync

suse-cvrf
почти 9 лет назад

Security update for rsync

EPSS

Процентиль: 94%
0.06389
Низкий