Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com
☎ 03 60 47 09 81 - info@securiteinfo.com
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
- https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj
- https://github.com/Otsutez/cve-2024-12085
- https://github.com/adegoodyer/kubernetes-admin-toolkit
- https://github.com/mosaicwang/myrpm
- https://github.com/nomi-sec/PoC-in-GitHub