Поиск уязвимостей
Количество 22
Количество 22
BDU:2025-00372
Уязвимость утилиты для передачи и синхронизации файлов Rsync, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю повысить свои привилегии
ROS-20250203-04
Множественные уязвимости rsync
ALT-PU-2025-1322
ALT-PU-2025-1322: package `rsync` update to version 3.2.7-alt2
ALT-PU-2025-1240
ALT-PU-2025-1240: package `rsync` update to version 3.2.7-alt2
CVE-2024-12747
A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.
CVE-2024-12747
A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.
CVE-2024-12747
A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.
CVE-2024-12747
Rsync: race condition in rsync handling symbolic links
CVE-2024-12747
A flaw was found in rsync. This vulnerability arises from a race condi ...
SUSE-SU-2025:0991-1
Security update for rsync
GHSA-gp7r-m4cc-qhwq
A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.
RLSA-2025:7050
Moderate: rsync security update
RLSA-2025:2600
Moderate: rsync security update
ELSA-2025-7050
ELSA-2025-7050: rsync security update (MODERATE)
ELSA-2025-2600
ELSA-2025-2600: rsync security update (MODERATE)
SUSE-SU-2025:0166-1
Security update for rsync
SUSE-SU-2025:0165-1
Security update for rsync
SUSE-SU-2025:0157-1
Security update for rsync
SUSE-SU-2025:0156-1
Security update for rsync
SUSE-SU-2026:2083-1
Security update for rsync
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-00372 Уязвимость утилиты для передачи и синхронизации файлов Rsync, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю повысить свои привилегии | CVSS3: 5.6 | 0% Низкий | почти 2 года назад |
 | ROS-20250203-04 Множественные уязвимости rsync | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-1322 ALT-PU-2025-1322: package `rsync` update to version 3.2.7-alt2 | CVSS3: 9.8 | почти 2 года назад | |
| ALT-PU-2025-1240 ALT-PU-2025-1240: package `rsync` update to version 3.2.7-alt2 | CVSS3: 9.8 | почти 2 года назад | |
 | CVE-2024-12747 A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation. | CVSS3: 5.6 | 0% Низкий | почти 2 года назад |
 | CVE-2024-12747 A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation. | CVSS3: 5.6 | 0% Низкий | почти 2 года назад |
 | CVE-2024-12747 A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation. | CVSS3: 5.6 | 0% Низкий | почти 2 года назад |
 | CVE-2024-12747 Rsync: race condition in rsync handling symbolic links | CVSS3: 5.6 | 0% Низкий | почти 2 года назад |
| CVE-2024-12747 A flaw was found in rsync. This vulnerability arises from a race condi ... | CVSS3: 5.6 | 0% Низкий | почти 2 года назад |
 | SUSE-SU-2025:0991-1 Security update for rsync | 0% Низкий | больше 1 года назад | |
| GHSA-gp7r-m4cc-qhwq A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation. | CVSS3: 5.6 | 0% Низкий | почти 2 года назад |
 | RLSA-2025:7050 Moderate: rsync security update | около 1 года назад | ||
| RLSA-2025:2600 Moderate: rsync security update | больше 1 года назад | ||
| ELSA-2025-7050 ELSA-2025-7050: rsync security update (MODERATE) | больше 1 года назад | ||
| ELSA-2025-2600 ELSA-2025-2600: rsync security update (MODERATE) | больше 1 года назад | ||
| SUSE-SU-2025:0166-1 Security update for rsync | почти 2 года назад | ||
| SUSE-SU-2025:0165-1 Security update for rsync | почти 2 года назад | ||
| SUSE-SU-2025:0157-1 Security update for rsync | почти 2 года назад | ||
| SUSE-SU-2025:0156-1 Security update for rsync | почти 2 года назад | ||
| SUSE-SU-2026:2083-1 Security update for rsync | 6 месяцев назад |
Уязвимостей на страницу