Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15994

Опубликовано: 29 окт. 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*
Версия до 3.1.2 (включая)

EPSS

Процентиль: 33%
0.00128
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

CVSS3: 5.4
redhat
больше 8 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

CVSS3: 9.8
debian
больше 8 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums ...

CVSS3: 9.8
github
больше 3 лет назад

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.

EPSS

Процентиль: 33%
0.00128
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-354