CVE-2024-12086

Katalog CVE

CVSS 6.8 · Medium EPSS 1,8%

Kerentanan Detection of Error Condition Without Action pada samba rsync, redhat openshift container platform +7 lainnya. Skor CVSS 3.1 6.8 (Medium) menurut NVD.

Deskripsi (NVD)

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.

Rincian

Terbit di NVD

14 Januari 2025

Terakhir diubah

21 Agustus 2026

Status NVD

Modified

CVSS 3.1

6.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-390: Detection of Error Condition Without Action

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 78,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2024-12086 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2330577 issue tracking · advisory pihak ketiga
• https://kb.cert.org/vuls/id/952657 advisory pihak ketiga
• https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj exploit · advisory pihak ketiga
• https://access.redhat.com/errata/RHBA-2025:6470
• https://access.redhat.com/errata/RHSA-2026:19368
• https://access.redhat.com/errata/RHSA-2026:20603
• https://access.redhat.com/errata/RHSA-2026:29197
• https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html
• https://security.netapp.com/advisory/ntap-20250131-0002/
• https://www.kb.cert.org/vuls/id/952657