A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-rsyncalma-upgrade-rsync-daemonalma-upgrade-rsync-rrsync | May 27, 2026 | May 19, 2026 | |
| Alpine Linux | alpine-linux-upgrade-rsync | Aug 8, 2025 | Jan 14, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-rsyncamazon-linux-ami-2-upgrade-rsync-debuginfo | Jan 15, 2025 | Jan 15, 2025 | |
| Amazon_linux | — | amazon-linux-upgrade-rsync | Jan 18, 2025 | Jan 14, 2025 |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-rsyncamazon-linux-2023-upgrade-rsync-daemonamazon-linux-2023-upgrade-rsync-debuginfoamazon-linux-2023-upgrade-rsync-debugsource | Feb 17, 2025 | Jan 14, 2025 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Jan 14, 2025 | |
| Aruba Aos Cx | aruba-aos-cx-cve-2024-12086 | Nov 28, 2025 | Nov 18, 2025 | |
| Debian | debian-upgrade-rsync | Jan 16, 2025 | Jan 14, 2025 | |
| Dell Powerstore Dsa2025223 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | May 27, 2025 | |
| Freebsd | freebsd-upgrade-package-rsync | Jan 16, 2025 | Jan 14, 2025 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-rsync | Jan 16, 2025 | Jan 14, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-rsync | May 13, 2025 | Jan 14, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-rsync | Apr 11, 2025 | Jan 14, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-rsync | May 7, 2025 | Jan 14, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-rsync | Jun 11, 2025 | Jan 14, 2025 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jul 2, 2026 | Jul 1, 2026 | |
| Redhat_linux | redhat-upgrade-rsyncredhat-upgrade-rsync-daemonredhat-upgrade-rsync-debuginforedhat-upgrade-rsync-debugsourceredhat-upgrade-rsync-rrsync | Jul 9, 2025 | Jan 14, 2025 | |
| Rocky_linux | rocky-upgrade-rsyncrocky-upgrade-rsync-debuginforocky-upgrade-rsync-debugsource | Jun 1, 2026 | May 28, 2026 | |
| Suse | — | suse-upgrade-rsync | Jan 20, 2025 | Jan 14, 2025 |
| Ubuntu | ubuntu-pro-upgrade-rsyncubuntu-upgrade-rsync | Jan 15, 2025 | Jan 14, 2025 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 14, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub