Lucene search
Veracode Vulnerability DatabaseVERACODE:25294HistoryMay 10, 2020 - 11:24 p.m.
Arbitrary Code Execution
2020-05-1023:24:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
EPSS
0.087
Percentile
94.5%
rsync is vulnerable to arbitrary code execution. The vulnerability exists as the receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing ‘\0’ character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon.
Related
checkpoint_advisories
checkpoint_advisories
Rsync receive_xattr Heap-based Buffer Overread (CVE-2017-16548)
2017-11-20 00:00:00
ubuntucve
ubuntucve
CVE-2017-16548
2017-11-06 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2017-1333)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2017-0459)
2022-01-28 00:00:00
Huawei EulerOS: Security Advisory for rsync (EulerOS-SA-2017-1332)
2020-01-23 00:00:00
prion
prion
Heap overflow
2017-11-06 05:29:00
debiancve
debiancve
CVE-2017-16548
2017-11-06 05:29:00
cve
cve
CVE-2017-16548
2017-11-06 05:29:00
nessus
nessus
Photon OS 1.0: Rsync PHSA-2017-0052
2024-07-22 00:00:00
EulerOS 2.0 SP1 : rsync (EulerOS-SA-2017-1332)
2017-12-18 00:00:00
EulerOS 2.0 SP2 : rsync (EulerOS-SA-2017-1333)
2017-12-18 00:00:00
nvd
nvd
CVE-2017-16548
2017-11-06 05:29:00
mageia
mageia
Updated rsync package fixes security vulnerability
2017-12-21 20:43:29
alpinelinux
alpinelinux
CVE-2017-16548
2017-11-06 05:29:00
redhatcve
redhatcve
CVE-2017-16548
2017-11-09 10:19:30
cvelist
cvelist
CVE-2017-16548
2017-11-06 05:00:00
osv
osv
CVE-2017-16548
2017-11-06 05:29:00
rsync - security update
2017-12-23 00:00:00
rsync - security update
2017-12-17 00:00:00
slackware
slackware
[slackware-security] rsync
2018-02-01 18:52:57
cloudfoundry
cloudfoundry
USN-3543-1: rsync vulnerabilities | Cloud Foundry
2018-03-01 00:00:00
ubuntu
ubuntu
rsync vulnerabilities
2018-01-23 00:00:00
rsync vulnerabilities
2018-01-23 00:00:00
debian
debian
[SECURITY] [DSA 4068-1] rsync security update
2017-12-17 21:15:38
[SECURITY] [DLA 1218-1] rsync security update
2017-12-22 23:10:34
gentoo
gentoo
rsync: Multiple vulnerabilities
2018-01-17 00:00:00
freebsd
freebsd
rsync -- multiple vulnerabilities
2017-12-17 00:00:00
archlinux
archlinux
[ASA-201801-21] rsync: multiple issues
2018-01-29 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1964
2021-07-02 18:04:47
photon
photon
Critical Photon OS Security Update - PHSA-2017-0005
2017-12-07 00:00:00
Critical Photon OS Security Update - PHSA-2017-0091
2017-12-08 00:00:00