CVE-2024-12084 Rsync: heap buffer overflow in rsync due to improper checksum length handling
Heap buffer overflow in rsync daemon allows attackers to execute arbitrary code or cause denial of service via crafted checksum lengths.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-12084?
CVE-2024-12084 is a critical memory corruption vulnerability in Gentoo Linux, published on 15 Jan 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Which versions are affected by CVE-2024-12084?
It affects 8 products.
Products include Almalinux Almalinux, Archlinux Arch Linux, Gentoo Linux, Nixos Nixos, Novell Suse Linux, Redhat Enterprise Linux and 2 more.
How do I fix CVE-2024-12084?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-12084 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-12084 exists.
Public exploit code: 3 proofs of concept on GitHub.
Other vulnerabilities in Gentoo Linux
- CVE-2024-6387 Openssh: regresshion - race condition in ssh allows rce/dos
- CVE-2024-12085 Rsync: info leak via uninitialized stack contents
- CVE-2024-12087 Rsync: path traversal vulnerability in rsync
- CVE-2024-12088 Rsync: --safe-links option bypass leads to path traversal
- CVE-2024-12086 Rsync: rsync server leaks arbitrary client files
Sources
Also known as ALPINE-CVE-2024-12084, AZL-55646, AZL-55691, BELL-CVE-2024-12084, DEBIAN-CVE-2024-12084, GHSA-85h7-m8c3-v9wc and 1 more.