CVE-2024-12084

Published Jan 15, 2025

Last updated a month ago

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-12084 is a heap-based buffer overflow vulnerability found in the rsync daemon. It stems from the incorrect management of user-supplied checksum lengths, specifically the "s2length" parameter. When the maximum digest length (MAX_DIGEST_LEN) surpasses the fixed sum length (SUM_LENGTH), set at 16 bytes, an attacker can manipulate the s2length value to write data beyond the allocated memory buffer, specifically the "sum2" buffer. This vulnerability is exploitable when the rsync daemon's default configuration permits anonymous file synchronization. By crafting a malicious s2length value, an attacker could potentially achieve remote code execution. Official updates have been released to address this vulnerability, and users are strongly encouraged to upgrade their rsync installations. As a temporary mitigation, users can modify the rsyncd configuration to require authentication, thereby disabling anonymous access.

Description
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Source
secalert@redhat.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

secalert@redhat.com
CWE-122

Social media

Hype score
Not currently trending
  1. 🚨 Vulnerabilidades críticas en rsync https://t.co/RYsv5c5cA2… CVE-2024-12084 CVE-2024-12085 CVE-2024-12086 CVE-2024-12087/12088 https://t.co/IVb6Af1eJ5… https://t.co/DSuiDrvg49

    @doncaptador

    2 Mar 2025

    19 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🚨 Vulnerabilidades críticas en rsync https://t.co/GGCeKTqsNn CVE-2024-12084 CVE-2024-12085 CVE-2024-12086 CVE-2024-12087/12088 https://t.co/32SfTO2Dt8 https://t.co/VG0QeYp6qr

    @elhackernet

    28 Feb 2025

    2126 Impressions

    14 Retweets

    31 Likes

    8 Bookmarks

    0 Replies

    2 Quotes

  3. ⚠️ Vulnerability Alert: RSync Vulnerabilities 📅 Timeline: Disclosure: 2025-01-14, Patch: 2025-01-14 🆔cveId: CVE-2024-12084 📊baseScore: 9.8 📏cvssMetrics: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvssSeverity: Critical 🔴 🛠️exploitMaturity: Proof-of-Concept 📂affectedVersions:… h

    @syedaquib77

    26 Feb 2025

    41 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. 🚨 Rsync Vulnerabilities Let Attacker Gain Full Server Control Read more: https://t.co/8JtyChMNtq ✅ Heap Buffer Overflow in Checksum Handling (CVE-2024-12084) ✅ ASLR Bypass via Stack Information Leak (CVE-2024-12085) #cybersecurity #linux

    @gbhackers_news

    26 Feb 2025

    51 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. 🚨 Rsync Vulnerabilities Let Attacker Gain Full Server Control Read more: https://t.co/qN2c0x79MS ✅ Heap Buffer Overflow in Checksum Handling (CVE-2024-12084) ✅ ASLR Bypass via Stack Information Leak (CVE-2024-12085) ✅ Client-Side File Exfiltration (CVE-2024-12086) ✅… https://

    @The_Cyber_News

    26 Feb 2025

    356 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  6. CVE-2024-12084 & CVE-2024-12085: Rsync Flaws Allow Hackers to Take Over Servers, PoC Published #PoC https://t.co/ogBUaDwN7n

    @samilaiho

    26 Feb 2025

    125 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  7. CVE-2024-12084 & CVE-2024-12085: Rsync Flaws Allow Hackers to Take Over Servers, PoC Published Explore CVE-2024-12084 PoC and learn about critical vulnerabilities in Rsync that could enable remote code execution and data leaks. https://t.co/Wyl3fUY3Cf

    @the_yellow_fall

    26 Feb 2025

    518 Impressions

    4 Retweets

    5 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  8. A Rapid7 Analysis was added for "CVE-2024-12084". (rsync) https://t.co/49gTXp2piQ

    @Dinosn

    25 Feb 2025

    1694 Impressions

    2 Retweets

    1 Like

    1 Bookmark

    0 Replies

    0 Quotes

  9. Kritieke kwetsbaarheid in rsync daemon: een diepgaande analyse van cve-2024-12084 https://t.co/1rqEZOft5j #CVE-2024-12084 #rsync daemon veiligheid #Red Hat kwetsbaarheid #heap-based buffer overflow #kritieke software kwetsbaarheden #Trending #Tech #Nieuws

    @TrendingNewsBot

    25 Jan 2025

    4 Impressions

    0 Retweets

    3 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  10. Six vulnerabilities in Rsync include CVE-2024-12084, a critical heap-based buffer overflow, and CVE-2024-12085, a high-severity checksum flaw. Combined, they allow code execution. Shodan shows 660,000+ exposed Rsync servers. Update immediately.

    @Cyber_Sec_Raj

    25 Jan 2025

    21 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  11. QNAP fixes six Rsync vulnerabilities in NAS backup, recovery app: https://t.co/MCkSDs0irh QNAP has addressed six vulnerabilities in its HBS 3 Hybrid Backup Sync 25.1.x, which could allow remote code execution on unpatched NAS devices. The flaws, tracked as CVE-2024-12084 to… htt

    @securityRSS

    24 Jan 2025

    41 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  12. cve-2024-12084/cve-2024-12084.py at main · themirze/cve-2024-12084 · GitHub https://t.co/WcD8LkfCKO

    @akaclandestine

    22 Jan 2025

    1246 Impressions

    2 Retweets

    10 Likes

    3 Bookmarks

    0 Replies

    0 Quotes

  13. CVE-2024-12747,CVE-2024-12088,CVE-2024-12087,CVE-2024-12085,CVE-2024-12084 alert 🚨 RSYNC: Multiples vulnerabilities leading to Remote Code Execution The vulnerabilities have been integrated into Patrowl. Our customers assets are protected. 🦉 #CyberSecurity #InfoSec #rsync https

    @Patrowl_io

    22 Jan 2025

    47 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  14. GitHub - themirze/cve-2024-12084 - https://t.co/107plyY0N9

    @piedpiper1616

    22 Jan 2025

    1228 Impressions

    6 Retweets

    15 Likes

    2 Bookmarks

    0 Replies

    0 Quotes

  15. CVE-2024-12084> A heap-based buffer overflow flaw was found in the rsync daemon. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer. https://t.co/vVPBJ2NthU https://t.co/1EYuE7FNPz

    @cyber_advising

    21 Jan 2025

    1945 Impressions

    15 Retweets

    35 Likes

    4 Bookmarks

    1 Reply

    0 Quotes

  16. Top 5 Trending CVEs: 1 - CVE-2024-50603 2 - CVE-2023-34960 3 - CVE-2024-49138 4 - CVE-2024-12084 5 - CVE-2025-21210 #cve #cvetrends #cveshield #cybersecurity https://t.co/4Fua3CAN6W

    @CVEShield

    21 Jan 2025

    18 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  17. #Linux Weekly Roundup for January 19th, 2025: Linux kernel 6.13, Linux Mint 22.1, MX Linux 23.5, Dillo 3.2, OpenZFS 2.3, DXVK 2.5.3, new rsync vulnerability (CVE-2024-12084) patched, Oracle announces OLED, and more https://t.co/ILXS08fb92 #OpenSource #FOSS https://t.co/YqHMTFque

    @9to5linux

    20 Jan 2025

    1615 Impressions

    9 Retweets

    35 Likes

    1 Bookmark

    0 Replies

    0 Quotes

  18. 🚨Alert🚨 CVE-2024-12084(CVSS 9.8) : Heap overflow that could lead to remote code execution 📊 52M+ Services are found on the https://t.co/ysWb28BTvF yearly. 🔗Hunter Link:https://t.co/eaQDXmdvLg 👇Query HUNTER : https://t.co/q9rtuGfZuz="rsync" FOFA : product="rsync" SHODAN :… ht

    @HunterMapping

    20 Jan 2025

    4127 Impressions

    24 Retweets

    79 Likes

    23 Bookmarks

    0 Replies

    1 Quote

  19. Detecting and mitigating CVE-2024-12084: rsync remote code execution |  by Michael Clark @sysdig https://t.co/6AqNxkZHRS

    @cyb3rops

    18 Jan 2025

    21618 Impressions

    41 Retweets

    137 Likes

    38 Bookmarks

    0 Replies

    1 Quote

  20. On Jan 14, 2025, critical vulnerabilities were found in rsync, notably CVE-2024-12084, with a CVSS score of 9.8 for remote code execution. Mitigation strategies are crucial. 🛡️ #Rsync #RemoteExecution #USA #ThreatResearch link: https://t.co/OFxlrmEe5w https://t.co/REBizlnP8z

    @TweetThreatNews

    18 Jan 2025

    68 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  21. 🛡️ CVE-2024-12084: ثغرة تنفيذ تعليمات برمجية عن بُعد (Rsync Remote Code Execution) 🛡️ في هذا المنشور، نسلط الضوء على ثغرة أمنية خطيرة في أداة Rsync المستخدمة على نطاق واسع لنقل ومزامنة الملفات بين الأجهزة. تُعرف الثغرة بـ CVE-2024-12084، وهي تتيح للمهاجمين تنفيذ تعليمات برمجية

    @MahRabie

    17 Jan 2025

    36 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  22. 🛡️ CVE-2024-12084: ثغرة تنفيذ تعليمات برمجية عن بُعد (Rsync Remote Code Execution) 🛡️ في هذا المنشور، نسلط الضوء على ثغرة أمنية خطيرة في أداة Rsync المستخدمة على نطاق واسع لنقل ومزامنة الملفات بين الأجهزة. تُعرف الثغرة بـ CVE-2024-12084، وهي تتيح للمهاجمين تنفيذ تعليمات برمجية

    @MahRabie

    17 Jan 2025

    4 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  23. 🚨 Alert: CVE-2024-12084 🚨 A severe heap overflow vulnerability in rsync could lead to remote code execution—affecting 600k+ systems globally. 🔎 Read more details on the Falco detection rule for this CVE, as well as steps for mitigation from Sysdig TRT:https://t.co/aKe5J8bwxx

    @sysdig

    17 Jan 2025

    321 Impressions

    3 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  24. [1/4] 🚨Two days ago, 6 vulnerabilities affecting rsync, a widely-used file transferring and synchronizing utility were published. Two of these, CVE-2024-12084 - a heap buffer overflow that could lead to code execution, and CVE-2024-12085 - an information leak allowing one-byte…

    @JFrogSecurity

    16 Jan 2025

    530 Impressions

    3 Retweets

    7 Likes

    2 Bookmarks

    1 Reply

    0 Quotes

  25. ⚠️ CVE-2024-12084 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling CVSS 3.1: 9.8 In total 6 vulnerabilities found in rsync by @scannell_simon @JasielSpelman and Pedro Gallegos from @google ➡️ More info: https://t.co/g5Zyj5lsrk

    @javutin

    16 Jan 2025

    130 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  26. CVE-2024-12084 A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code… https://t.co/oVEfbFzFsA

    @CVEnew

    15 Jan 2025

    457 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  27. [CVE-2024-12084: CRITICAL] Heap-based overflow flaw discovered in rsync daemon due to handling of attacker-controlled checksum lengths, allowing out-of-bounds writes. #CyberSecurity#cybersecurity,#vulnerability https://t.co/xRsehl0aLJ https://t.co/CnQo8UrWX5

    @CveFindCom

    15 Jan 2025

    90 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  28. Multiple vulnerabilities in the Rsync tool, including a critical heap-buffer overflow (CVE-2024-12084, CVSS 9.8), expose users to code execution risks. Patches available in version 3.4.0. 🛡️💻 #Rsync #SecurityFlaw #USA #CybersecurityNews link: https://t.co/TOBPnaaUqg https://t.

    @TweetThreatNews

    15 Jan 2025

    76 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  29. Rsyncで重大(Critical)な脆弱性。CVE-2024-12084はCVSSスコア9.8で、バッファオーバーフローによる任意コード実行のおそれ。その他脆弱性5件と併せパッチされている。 https://t.co/eXTidaeTcK

    @__kokumoto

    15 Jan 2025

    2696 Impressions

    16 Retweets

    23 Likes

    9 Bookmarks

    0 Replies

    0 Quotes

  30. CVE-2024-12084 (CVSS 9.8) - Code Execution Risk: Rsync Vulnerability Demands Immediate Patching Stay protected from CVE-2024-12084 and other vulnerabilities in #Rsync. Learn about the risks, exploits, and how to secure your systems. https://t.co/TkBkHh0TAj

    @the_yellow_fall

    15 Jan 2025

    874 Impressions

    4 Retweets

    9 Likes

    7 Bookmarks

    0 Replies

    0 Quotes

  31. 6 new CVEs in "rsync". "In the most severe CVE, an attacker only requires anonymous read access to a rsync server, such as a public mirror, to execute arbitrary code on the machine the server is running on." That would be CVE-2024-12084 (9.8) https://t.co/aY8jDVf7yb @jschauma

    @dacbarbos

    14 Jan 2025

    99 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  32. RCE in rsync, CVE-2024-12084 (and 5 more vulnerabilities) https://t.co/l4t2om6LVP

    @_r_netsec

    14 Jan 2025

    1187 Impressions

    6 Retweets

    7 Likes

    2 Bookmarks

    0 Replies

    0 Quotes

  33. Fixes for a critical rsync vulnerability (CVE-2024-12084) have been released for Stable/Bookworm, Testing and Unstable. Oldstable/Bullseye is not affected. Fixes for other lower severity CVEs have also been released in the same update and can all… https://t.co/2T6a4CBZgH #debian

    @debian

    14 Jan 2025

    8297 Impressions

    47 Retweets

    190 Likes

    16 Bookmarks

    2 Replies

    4 Quotes