Description
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Affected products
- almalinux / almalinux9.0 – 9.0
- almalinux / almalinux10.0 – 10.0
- almalinux / almalinux8.0 – 8.0
- archlinux / arch_linux
- gentoo / linux
- NixOS / nixos24.11
- Novell / suse_linux
- RedHat / discovery1.14 – 1.14
- RedHat / enterprise_linux8.0 – 8.0
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux10.0 – 10.0
- RedHat / enterprise_linux7.0 – 7.0
- RedHat / enterprise_linux6.0 – 6.0
- RedHat / enterprise_linux_eus9.6 – 9.6
- RedHat / enterprise_linux_for_arm_648.0_aarch64 – 8.0_aarch64
- RedHat / enterprise_linux_for_arm_649.0_aarch64 – 9.0_aarch64
- RedHat / enterprise_linux_for_arm_64_eus9.6_aarch64 – 9.6_aarch64
- RedHat / enterprise_linux_for_ibm_z_systems9.0_s390x – 9.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems8.0_s390x – 8.0_s390x
- RedHat / enterprise_linux_for_ibm_z_systems_eus9.6_s390x – 9.6_s390x
- RedHat / enterprise_linux_for_power_little_endian8.0_ppc64le – 8.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian9.0_ppc64le – 9.0_ppc64le
- RedHat / enterprise_linux_for_power_little_endian_eus9.6_ppc64le – 9.6_ppc64le
- RedHat / enterprise_linux_server_aus9.6 – 9.6
- RedHat / enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.6_ppc64le – 9.6_ppc64le
- RedHat / enterprise_linux_update_services_for_sap_solutions9.6 – 9.6
- RedHat / openshift_container_platform4.0 – 4.0
- Samba / rsync3.3.0
- tritondatacenter / smartos20250123
References
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHBA-2025:6470
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:2600
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:7050
- VENDOR_ADVISORYhttps://access.redhat.com/errata/RHSA-2025:8385
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2024-12088
- MISChttps://bugzilla.redhat.com/show_bug.cgi?id=2330676
- MISChttps://kb.cert.org/vuls/id/952657
Updated 22m ago · 8 sources