Description (CNA)
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 through 3.3.0 |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected 0:3.4.1-2.el10 before * |
| Red Hat / Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION | unaffected 0:3.0.6-12.el6_10.1 before * |
| Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support | unaffected 0:3.1.2-12.el7_9.1 before * |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected 0:3.1.3-20.el8_10 before * |
| Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Support | unaffected 0:3.1.3-7.el8_2.3 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | unaffected 0:3.1.3-12.el8_4.3 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Telecommunications Update Service | unaffected 0:3.1.3-12.el8_4.3 before * |
| Red Hat / Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | unaffected 0:3.1.3-12.el8_4.3 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | unaffected 0:3.1.3-14.el8_6.6 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Service | unaffected 0:3.1.3-14.el8_6.6 before * |
| Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | unaffected 0:3.1.3-14.el8_6.6 before * |
| Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Support | unaffected 0:3.1.3-20.el8_8.1 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:3.2.3-20.el9_5.1 before * |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected 0:3.2.3-20.el9_5.1 before * |
| Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | unaffected 0:3.2.3-9.el9_0.3 before * |
| Red Hat / Red Hat Enterprise Linux 9.2 Extended Update Support | unaffected 0:3.2.3-19.el9_2.1 before * |
| Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Support | unaffected 0:3.2.3-19.el9_4.1 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.12 | unaffected 412.86.202502100314-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.13 | unaffected 413.92.202503112237-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.14 | unaffected 414.92.202502111902-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.15 | unaffected 415.92.202501281917-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.16 | unaffected v4.16.0-202501311735.p0.g2cb0020.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.16 | unaffected v4.16.0-202501311933.p0.g4246d04.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.16 | unaffected v4.16.0-202501311605.p0.g4246d04.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.17 | unaffected 417.94.202502051822-0 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gc395190.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g987615c.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g3385690.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502101302.p0.g763313c.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041632.p0.g6182930.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9 before * |
| Red Hat / Red Hat OpenShift Container Platform 4.18 | unaffected v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9 before * |
CWE
CWE-908
References
- https://access.redhat.com/errata/RHBA-2025:6470
- https://access.redhat.com/errata/RHSA-2024:6122
- https://access.redhat.com/errata/RHSA-2025:0324
- https://access.redhat.com/errata/RHSA-2025:0325
- https://access.redhat.com/errata/RHSA-2025:0637
- https://access.redhat.com/errata/RHSA-2025:0688
- https://access.redhat.com/errata/RHSA-2025:0714
- https://access.redhat.com/errata/RHSA-2025:0774
- https://access.redhat.com/errata/RHSA-2025:0787
- https://access.redhat.com/errata/RHSA-2025:0790
- https://access.redhat.com/errata/RHSA-2025:0849
- https://access.redhat.com/errata/RHSA-2025:0884
- https://access.redhat.com/errata/RHSA-2025:0885
- https://access.redhat.com/errata/RHSA-2025:1120
- https://access.redhat.com/errata/RHSA-2025:1123
- https://access.redhat.com/errata/RHSA-2025:1128
- https://access.redhat.com/errata/RHSA-2025:1225
- https://access.redhat.com/errata/RHSA-2025:1227
- https://access.redhat.com/errata/RHSA-2025:1242
- https://access.redhat.com/errata/RHSA-2025:1451
- https://access.redhat.com/errata/RHSA-2025:21885
- https://access.redhat.com/errata/RHSA-2025:2701
- https://access.redhat.com/security/cve/CVE-2024-12085
- https://bugzilla.redhat.com/show_bug.cgi?id=2330539
- https://kb.cert.org/vuls/id/952657
ADP enrichment
No English description supplied.
No English description supplied.