critical
CVE-2024-12084
rsync: Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by Red Hat, Azure Linux, CBL-Mariner, Photon OS. Rated lower by Ubuntu (high).
Description
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | rsync | 0:3.4.1-1.azl3 |
| CBL-Mariner 2.0 | rsync | 0:3.4.1-1.cm2 |
| Photon OS 4.0 | rsync | 3.2.7-3.ph4 |
| Photon OS 5.0 | rsync | 3.2.7-5.ph5 |
| alpine 3.18 | rsync | 3.4.0-r0 |
| alpine 3.19 | rsync | 3.4.0-r0 |
| alpine 3.20 | rsync | 3.4.0-r0 |
| alpine 3.21 | rsync | 3.4.0-r0 |
| alpine 3.22 | rsync | 3.4.0-r0 |
| alpine 3.23 | rsync | 3.4.0-r0 |
| alpine 3.24 | rsync | 3.4.0-r0 |
| alpine edge | rsync | 3.4.0-r0 |
Show all 31 entries from 28 sources
| Source | Package | Fixed in |
|---|---|---|
| Azure Linux 3.0 | rsync | 0:3.4.1-1.azl3 |
| CBL-Mariner 2.0 | rsync | 0:3.4.1-1.cm2 |
| Photon OS 4.0 | rsync | 3.2.7-3.ph4 |
| Photon OS 5.0 | rsync | 3.2.7-5.ph5 |
| alpine 3.18 | rsync | 3.4.0-r0 |
| alpine 3.19 | rsync | 3.4.0-r0 |
| alpine 3.20 | rsync | 3.4.0-r0 |
| alpine 3.21 | rsync | 3.4.0-r0 |
| alpine 3.22 | rsync | 3.4.0-r0 |
| alpine 3.23 | rsync | 3.4.0-r0 |
| alpine 3.24 | rsync | 3.4.0-r0 |
| alpine edge | rsync | 3.4.0-r0 |
| debian 12 | rsync | 3.2.7-1+deb12u1 |
| debian 13 | rsync | 3.3.0+ds1-3 |
| debian 14 | rsync | 3.3.0+ds1-3 |
| echo | rsync | 3.2.7-1+deb12u1 |
| rapidfort alpine 3.20 | rsync | 3.4.0-r0 |
| rapidfort alpine 3.22 | rsync | 3.4.0-r0 |
| rapidfort alpine 3.23 | rsync | 3.4.0-r0 |
| rapidfort alpine 3.24 | rsync | 3.4.0-r0 |
| rapidfort debian 12 | rsync | 0:3.3.0+ds1-3 |
| rapidfort debian 13 | rsync | 0:3.3.0+ds1-3 |
| rapidfort ubuntu 20.04 | rf-rsync | 0:3.2.7-0ubuntu0.22.04.3, 0:3.2.7-1ubuntu1.1 |
| rapidfort ubuntu 20.04 | rsync | 0:3.2.7-0ubuntu0.22.04.3, 0:3.2.7-1ubuntu1.1 |
| rapidfort ubuntu 22.04 | rf-rsync | 0:3.2.7-0ubuntu0.22.04.3, 0:3.2.7-1ubuntu1.1 |
| rapidfort ubuntu 22.04 | rsync | 0:3.2.7-0ubuntu0.22.04.3, 0:3.2.7-1ubuntu1.1 |
| rapidfort ubuntu 24.04 | rf-rsync | 0:3.2.7-0ubuntu0.22.04.3, 0:3.2.7-1ubuntu1.1 |
| rapidfort ubuntu 24.04 | rsync | 0:3.2.7-0ubuntu0.22.04.3, 0:3.2.7-1ubuntu1.1 |
| ubuntu 22.04 | rsync | 3.2.7-0ubuntu0.22.04.3 |
| ubuntu 24.04 | rsync | 3.2.7-1ubuntu1.1 |
| ubuntu 24.10 | rsync | 3.3.0-1ubuntu0.1 |
References
- http://www.openwall.com/lists/oss-security/2025/01/14/6
- https://access.redhat.com/errata/RHBA-2025:6470
- https://access.redhat.com/security/cve/CVE-2024-12084
- https://bugzilla.redhat.com/show_bug.cgi?id=2330527
- https://github.com/RsyncProject/rsync/commit/0902b52f6687b1f7952422080d50b93108742e53
- https://github.com/RsyncProject/rsync/commit/66015104257ab2b9b28b21411abf0b25a979a954
- https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj
- https://kb.cert.org/vince/comm/case/2083/
All 15 references
- https://kb.cert.org/vuls/id/952657
- https://nvd.nist.gov/vuln/detail/CVE-2024-12084
- https://security.netapp.com/advisory/ntap-20250131-0002/
- https://ubuntu.com/security/notices/USN-7206-1
- https://ubuntu.com/security/notices/USN-7206-3
- https://www.cve.org/CVERecord?id=CVE-2024-12084
- https://www.kb.cert.org/vuls/id/952657