2330577 – (CVE-2024-12086) CVE-2024-12086 rsync: rsync server leaks arbitrary client files

Bug 2330577 (CVE-2024-12086) - CVE-2024-12086 rsync: rsync server leaks arbitrary client files

Summary: CVE-2024-12086 rsync: rsync server leaks arbitrary client files

Keywords:
Status:	NEW
Alias:	CVE-2024-12086
Deadline:	2025-01-14
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2337971 2337975 2337972 2337973 2337974
Blocks:
TreeView+	depends on / blocked

Attachments	(Terms of Use)

Description OSIDB Bzimport 2024-12-05 14:39:05 UTC

When a client connects to a malicious server the server is able to leak the contents of an arbitrary file on the client’s machine.

Note You need to log in before you can comment on or make changes to this bug.