Lucene search

K
ubuntuUbuntuUSN-2171-1
HistoryApr 23, 2014 - 12:00 a.m.

rsync vulnerability

2014-04-2300:00:00
ubuntu.com
30

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

Low

EPSS

0.047

Percentile

92.7%

Releases

  • Ubuntu 14.04 ESM

Packages

  • rsync - fast, versatile, remote (and local) file-copying tool

Details

Ryan Finnie discovered that the rsync daemon incorrectly handled invalid
usernames. A remote attacker could use this issue to cause rsync to consume
resources, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.04noarchrsync<Β 3.1.0-2ubuntu0.1UNKNOWN

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

Low

EPSS

0.047

Percentile

92.7%