Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15994

Опубликовано: 29 окт. 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*
Версия до 3.1.2 (включая)

EPSS

Процентиль: 63%
0.01001
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 9 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

CVSS3: 5.4
redhat
около 9 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

CVSS3: 9.8
debian
около 9 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums ...

CVSS3: 9.8
github
больше 4 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

CVSS3: 9.8
altlinux
больше 8 лет назад

ALT-PU-2018-1219: package `rsync` update to version 3.1.3-alt1

EPSS

Процентиль: 63%
0.01001
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-354