CVE-2011-1097 Memory corruption in n/a
Remote rsync servers can cause denial of service or execute arbitrary code via malformed data when specific recursion and ownership options are enabled.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-1097?
CVE-2011-1097 is a medium-severity memory corruption vulnerability in n/a, published on 30 Mar 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.
Weakness: CWE-119
Which versions are affected by CVE-2011-1097?
It affects 1 product.
Linux distribution packages (8)
rsync Red Hat:enterprise_linux:6::client | All versions | 0:3.0.6-5.el6_0.1 |
rsync-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:3.0.6-5.el6_0.1 |
rsync Red Hat:enterprise_linux:6::computenode | All versions | 0:3.0.6-5.el6_0.1 |
rsync-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:3.0.6-5.el6_0.1 |
rsync Red Hat:enterprise_linux:6::server | All versions | 0:3.0.6-5.el6_0.1 |
rsync-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:3.0.6-5.el6_0.1 |
rsync Red Hat:enterprise_linux:6::workstation | All versions | 0:3.0.6-5.el6_0.1 |
rsync-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:3.0.6-5.el6_0.1 |
Products include Samba Rsync.
How do I fix CVE-2011-1097?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2011-1097 being exploited?
There is no known exploitation of CVE-2011-1097 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-15994 Security feature bypass in n/a
- CVE-2026-53791 rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
- CVE-2026-70461 rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
- CVE-2026-70455 rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
- CVE-2026-70463 rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
Sources
Also known as DEBIAN-CVE-2011-1097, GHSA-rp4c-gxm3-wmf6, RHSA-2011:0390.