Описание
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a spoofed source IP in the PROXY protocol header to circumvent hosts allow/deny rules, gaining unauthorized access that would otherwise be blocked based on their real source address.
A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources.
Отчет
A flaw was found in the rsync daemon. When configured to use the PROXY protocol, an unauthenticated remote attacker can bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address. This allows unauthorized access to restricted resources. Note: Red Hat Enterprise Linux 8 and earlier versions do not contain the vulnerable PROXY protocol implementation and are not affected.
Меры по смягчению последствий
Restrict rsync daemon TCP/873 to the trusted proxy only (CME-202). If PROXY protocol is unused, leave proxy protocol disabled (the default).
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | rsync | Not affected | ||
| Red Hat Enterprise Linux 7 | rsync | Not affected | ||
| Red Hat Enterprise Linux 8 | rsync | Not affected | ||
| Red Hat OpenShift Container Platform 4 | openshift/ose-rhel-coreos-8 | Not affected | ||
| Red Hat OpenShift Container Platform 5 | openshift/ose-rhel-coreos-9 | Affected | ||
| Red Hat Enterprise Linux 10 | rsync | Fixed | RHSA-2026:67463 | 14.09.2026 |
| Red Hat Enterprise Linux 9 | rsync | Fixed | RHSA-2026:67462 | 14.09.2026 |
| Red Hat Enterprise Linux 9 | rsync | Fixed | RHSA-2026:67462 | 14.09.2026 |
| Red Hat OpenShift Container Platform 4.22 | openshift/ose-rhel-coreos | Fixed | RHSA-2026:71446 | 29.09.2026 |
| Red Hat Cost Management On-Premise 1 | costmanagement/costmanagement-ui-rhel10 | Fixed | RHSA-2026:79357 | 08.10.2026 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
7.4 High
CVSS3
Связанные уязвимости
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a spoofed source IP in the PROXY protocol header to circumvent hosts allow/deny rules, gaining unauthorized access that would otherwise be blocked based on their real source address.
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a spoofed source IP in the PROXY protocol header to circumvent hosts allow/deny rules, gaining unauthorized access that would otherwise be blocked based on their real source address.
rsync daemon before 3.5.0contains an IP address spoofing vulnerability ...
Уязвимость утилиты для передачи и синхронизации файлов Rsync, связанная с обходом аутентификации посредством спуфинга, позволяющая нарушителю обойти существующие механизмы безопасности
7.4 High
CVSS3