AZL-55646
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-55646.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-55646
- Upstream
- Published
- 2025-01-15T15:15:10Z
- Modified
- 2026-04-01T05:18:41.458070Z
- Summary
- CVE-2024-12084 affecting package rsync for versions less than 3.4.1-1
- Details
-
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAXDIGESTLEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
- References