High severity7.5NVD Advisory· Published Jan 14, 2025· Updated Apr 14, 2026

CVE-2024-12085

Description

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Red Hat/Openshift
cpe:2.3:a:redhat:openshift:5.0:*:*:*:*:*:*:*
Red Hat/Openshift Container Platform6 versions
cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:redhat:openshift_container_platform:4.12:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.13:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.14:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.15:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.16:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:openshift_container_platform:4.17:*:*:*:*:*:*:*
Samba (software)/Rsync
cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*
Range: <3.3.0
Almalinux/Almalinux3 versions
cpe:2.3:o:almalinux:almalinux:10.0:-:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:almalinux:almalinux:10.0:-:*:*:*:*:*:*
- cpe:2.3:o:almalinux:almalinux:8.0:-:*:*:*:*:*:*
- cpe:2.3:o:almalinux:almalinux:9.0:-:*:*:*:*:*:*
Archlinux/Arch Linux
cpe:2.3:o:archlinux:arch_linux:-:*:*:*:*:*:*:*
File Project/Linux
cpe:2.3:o:gentoo:linux:-:*:*:*:*:*:*:*
Nixos/Nixos
cpe:2.3:o:nixos:nixos:*:*:*:*:*:*:*:*
Range: <24.11
Red Hat/Enterprise Linux Server4 versions
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Eus4 versions
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_eus:9.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Arm 643 versions
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.0_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64:9.2_aarch64:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems Eus6 versions
cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:8.8_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.4_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_arm_64_eus:9.6_aarch64:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:8.8_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.4_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems_eus:9.6_s390x:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Ibm Z Systems3 versions
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.0_s390x:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:9.2_s390x:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian4 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.8_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:9.2_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux For Power Little Endian Eus2 versions
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian_eus:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Aus6 versions
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_aus:9.6:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions7 versions
cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4_ppc64le:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.6_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:8.8_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.0_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.2_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.4_ppc64le:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions:9.6_ppc64le:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server Tus3 versions
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Update Services For Sap Solutions5 versions
cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.4:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:8.6:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.2:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_update_services_for_sap_solutions:9.6:*:*:*:*:*:*:*
SUSE S.A./Linux
cpe:2.3:o:suse:suse_linux:-:*:*:*:*:*:*:*
Tritondatacenter/Smartos
cpe:2.3:o:tritondatacenter:smartos:*:*:*:*:*:*:*:*
Range: <20250123
Red Hat/Rsyncllm-fuzzy
osv-coords29 versions
pkg:deb/ubuntu/rsync@3.3.0-1ubuntu0.1?arch=source&distro=oracular pkg:rpm/almalinux/rsync pkg:rpm/almalinux/rsync-daemon pkg:rpm/opensuse/rsync&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/rsync&distro=openSUSE%20Tumbleweed pkg:rpm/suse/rsync&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-ESPOS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP5-LTSS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Micro%205.1 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Micro%205.2 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP6 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP5-LTSS pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP5 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Micro%206.0 pkg:rpm/suse/rsync&distro=SUSE%20Linux%20Micro%206.1 pkg:rpm/suse/rsync&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/rsync&distro=SUSE%20Manager%20Server%204.3
< 3.3.0-1ubuntu0.1+ 28 more
- (no CPE)range: < 3.3.0-1ubuntu0.1
- (no CPE)range: < 3.2.3-20.el9_5.1
- (no CPE)range: < 3.2.3-20.el9_5.1
- (no CPE)range: < 3.2.7-150600.3.8.1
- (no CPE)range: < 3.4.1-1.1
- (no CPE)range: < 3.2.3-150000.4.33.1
- (no CPE)range: < 3.2.3-150000.4.33.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150000.4.33.1
- (no CPE)range: < 3.2.3-150000.4.33.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.7-150600.3.8.1
- (no CPE)range: < 3.1.3-3.22.1
- (no CPE)range: < 3.2.3-150000.4.33.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150000.4.33.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.1.3-3.22.1
- (no CPE)range: < 3.2.7-4.1
- (no CPE)range: < 3.3.0-slfo.1.1_3.1
- (no CPE)range: < 3.2.3-150400.3.17.1
- (no CPE)range: < 3.2.3-150400.3.17.1

Patches

Vulnerability mechanics

References

github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqjnvdExploitThird Party Advisory
access.redhat.com/errata/RHSA-2025:0324nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0325nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0637nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0688nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0714nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0774nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0787nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0790nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0849nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0884nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:0885nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:1120nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:1123nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:1128nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:1225nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:1227nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:1242nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:1451nvdThird Party Advisory
access.redhat.com/errata/RHSA-2025:2701nvdThird Party Advisory
access.redhat.com/security/cve/CVE-2024-12085nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
kb.cert.org/vuls/id/952657nvdThird Party Advisory
access.redhat.com/errata/RHBA-2025:6470nvd
access.redhat.com/errata/RHSA-2025:21885nvd
lists.debian.org/debian-lts-announce/2025/01/msg00008.htmlnvd
security.netapp.com/advisory/ntap-20250131-0002/nvd
www.kb.cert.org/vuls/id/952657nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.007
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000