Log in Start free

Vulnerability · Published Jan 14, 2025 · Assigned by redhat

CVE-2024-12087Rsync: path traversal vulnerability in rsync

Medium 6.5

In plain English

A medium-severity path traversal in rsync. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.3% (higher than 83% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)2.3%top 17.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8rsync3.1.3-21.el8_10ALSA-2025:2600
AlmaLinux:9rsync3.2.5-3.el9ALSA-2025:7050
AlmaLinux:8rsync-daemon3.1.3-21.el8_10ALSA-2025:2600
AlmaLinux:9rsync-daemon3.2.5-3.el9ALSA-2025:7050
AlmaLinux:9rsync-rrsync3.2.5-3.el9ALSA-2025:7050
Alpine:v3.20rsync3.4.0-r0ALPINE-CVE-2024-12087
Alpine:v3.21rsync3.4.0-r0ALPINE-CVE-2024-12087
Alpine:v3.22rsync3.4.0-r0ALPINE-CVE-2024-12087
Alpine:v3.23rsync3.4.0-r0ALPINE-CVE-2024-12087
Alpine:v3.24rsync3.4.0-r0ALPINE-CVE-2024-12087
Debian:12rsync3.2.7-1+deb12u1DSA-5843-1
Debian:12rsync3.2.7-1+deb12u1DEBIAN-CVE-2024-12087
Debian:13rsync3.3.0+ds1-3DEBIAN-CVE-2024-12087
Debian:14rsync3.3.0+ds1-3DEBIAN-CVE-2024-12087
Rocky Linux:8rsync0:3.1.3-21.el8_10RLSA-2025:2600
Rocky Linux:9rsync0:3.2.5-3.el9RLSA-2025:7050
Ubuntu:22.04:LTSrsync3.2.7-0ubuntu0.22.04.3USN-7206-1
Ubuntu:22.04:LTSrsync3.2.7-0ubuntu0.22.04.3UBUNTU-CVE-2024-12087
Ubuntu:24.04:LTSrsync3.2.7-1ubuntu1.1UBUNTU-CVE-2024-12087
Ubuntu:24.04:LTSrsync3.2.7-1ubuntu1.1USN-7206-1

Affected products (as reported)

VendorProductVersions
rsync 0 – through 3.3.0
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION see references
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support see references
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support see references
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On see references
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support see references
Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service see references
Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service see references
Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support see references
Red Hat Red Hat Discovery 1.14 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

References