Vulnerability · Published Jan 15, 2025 · Assigned by redhat
CVE-2024-12084Rsync: heap buffer overflow in rsync due to improper checksum length handling
Critical 9.8
In plain English
A critical-severity heap buffer overflow in rsync. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 72.5% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.
Official description
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | rsync | 3.4.0-r0 | ALPINE-CVE-2024-12084 |
| Alpine:v3.21 | rsync | 3.4.0-r0 | ALPINE-CVE-2024-12084 |
| Alpine:v3.22 | rsync | 3.4.0-r0 | ALPINE-CVE-2024-12084 |
| Alpine:v3.23 | rsync | 3.4.0-r0 | ALPINE-CVE-2024-12084 |
| Alpine:v3.24 | rsync | 3.4.0-r0 | ALPINE-CVE-2024-12084 |
| Debian:12 | rsync | 3.2.7-1+deb12u1 | DSA-5843-1 |
| Debian:12 | rsync | 3.2.7-1+deb12u1 | DEBIAN-CVE-2024-12084 |
| Debian:13 | rsync | 3.3.0+ds1-3 | DEBIAN-CVE-2024-12084 |
| Debian:14 | rsync | 3.3.0+ds1-3 | DEBIAN-CVE-2024-12084 |
| Ubuntu:22.04:LTS | rsync | 3.2.7-0ubuntu0.22.04.3 | USN-7206-1 |
| Ubuntu:22.04:LTS | rsync | 3.2.7-0ubuntu0.22.04.3 | UBUNTU-CVE-2024-12084 |
| Ubuntu:24.04:LTS | rsync | 3.2.7-1ubuntu1.1 | UBUNTU-CVE-2024-12084 |
| Ubuntu:24.04:LTS | rsync | 3.2.7-1ubuntu1.1 | USN-7206-1 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| rsync | 3.2.73.3.0 | |
| Red Hat | Red Hat Enterprise Linux 10 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
| Red Hat | Red Hat OpenShift Container Platform 4 | see references |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- RHBA-2025:6470 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-12084 vdb-entry, x_refsource_REDHAT
- RHBZ#2330527 issue-tracking, x_refsource_REDHAT
- https://kb.cert.org/vuls/id/952657
- https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj exploit
- http://www.openwall.com/lists/oss-security/2025/01/14/6
- https://security.netapp.com/advisory/ntap-20250131-0002/
- https://www.kb.cert.org/vuls/id/952657