PT-2017-14348 · Rsync Developers+1 · Rsync+1

Publicado 2017-10-29 · Atualizado 2019-10-03 · CVE-2017-15994

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions rsync versions prior to 2017-10-24

Description The issue makes it easier for remote attackers to bypass intended access restrictions by mishandling archaic checksums. This problem is not limited to the rsync developers, as the code has been used in various GitHub projects.

Recommendations For versions prior to 2017-10-24, update to a version that includes the fix for the checksum handling issue.

Correção

Enumeração de Fraquezas

CWE-354

Identificadores relacionados

ALT-PU-2018-1219

CVE-2017-15994

Produtos afetados

Alt Linux

Rsync

Referências · 16

• https://bdu.fstec.ru/vul/2021-01395 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15994 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17434 · Nota de Segurança
• https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=c252546ceeb0925eb8a4061315e3ff0a8c55b48b · Nota
• https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=7b8a4ecd6ff9cdf4e5d3850ebf822f1e989255b3 · Nota
• https://bdu.fstec.ru/vul/2019-04731 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-15994 · Nota de Segurança
• https://bdu.fstec.ru/vul/2021-01448 · Nota de Segurança
• https://packages.altlinux.org/ru/vuln/CVE-2017-15994 · Nota
• https://errata.altlinux.org/ALT-PU-2018-1219 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16548 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17433 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-15994 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-5764 · Nota de Segurança
• https://git.samba.org/?p=rsync.git%3Ba=commit%3Bh=9a480deec4d20277d8e20bc55515ef0640ca1e55 · Nota