CVE-2024-12085

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.5EPSS 9%

Published 2025-01-14Updated 2025-04-27

Media 2622

Vulnerability details

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CNAredhat

EPSS score history

Sources

9 links

PoC links are not available for guest users. Login to view them.

CVEShield The Hacker News SC Magazine NVD Analysis Bleeping Computer Bleeping Computer The Hacker News RedHat Vuln DB CVE Organization

Profile

CVSS

7.5

EPSS

Published

2025-01-14

Updated

2025-04-27

CNA

redhat

Vendors

Red Hat

23 products

CPEs

cpe:/o:redhat:enterprise_linux:10.0

cpe:/o:redhat:rhel_els:6

cpe:/o:redhat:rhel_els:7

cpe:/o:redhat:enterprise_linux:8::baseos

cpe:/o:redhat:rhel_aus:8.2::baseos

cpe:/o:redhat:rhel_tus:8.4::baseos

cpe:/o:redhat:rhel_e4s:8.4::baseos

cpe:/o:redhat:rhel_aus:8.4::baseos

cpe:/o:redhat:rhel_tus:8.6::baseos

cpe:/o:redhat:rhel_aus:8.6::baseos

cpe:/o:redhat:rhel_e4s:8.6::baseos

cpe:/o:redhat:rhel_eus:8.8::baseos

cpe:/a:redhat:enterprise_linux:9::appstream

cpe:/o:redhat:enterprise_linux:9::baseos

cpe:/a:redhat:rhel_e4s:9.0::appstream

cpe:/o:redhat:rhel_e4s:9.0::baseos

cpe:/a:redhat:rhel_eus:9.2::appstream

cpe:/o:redhat:rhel_eus:9.2::baseos

cpe:/a:redhat:rhel_eus:9.4::appstream

cpe:/o:redhat:rhel_eus:9.4::baseos

cpe:/a:redhat:openshift:4.12::el8

cpe:/a:redhat:openshift:4.13::el8

cpe:/a:redhat:openshift:4.13::el9

cpe:/a:redhat:openshift:4.14::el8

cpe:/a:redhat:openshift:4.14::el9

cpe:/a:redhat:openshift:4.15::el9

cpe:/a:redhat:openshift:4.15::el8

cpe:/a:redhat:openshift:4.16::el9

cpe:/a:redhat:openshift:4.17::el9

cpe:/a:redhat:logging:5.8::el9

cpe:/a:redhat:logging:5.9::el9

cpe:/a:redhat:openshift_compliance_operator:1::el9

cpe:/o:redhat:rhivos:1

cpe:/a:redhat:openshift:4.18::el9

cpe:/a:redhat:openshift:4

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated