The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0637 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0324 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0324 advisory.

    [3.2.3-20.1]
    - Resolves: RHEL-72495 - Info Leak via Uninitialized Stack Contents

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0790 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client.(CVE-2024-12087)

    A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time.(CVE-2024-12085)

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation.(CVE-2024-12747)

Tenable has extracted the preceding description block directly from the EulerOS rsync security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has rsync packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify     if a symbolic link destination sent from the server contains another symbolic link within it. This results     in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
    (CVE-2024-12088)

  - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time. (CVE-2024-12085)

  - A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the     client's machine. This issue occurs when files are being copied from a client to a server. During this     process, the rsync server will send checksums of local data to the client to compare with in order to     determine what data needs to be sent to the server. By sending specially constructed checksum values for     arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the     responses from the client. (CVE-2024-12086)

  - A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

  - A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation. (CVE-2024-12747)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-801 advisory.

    A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This     flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a     checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
    (CVE-2024-12085)

    A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the     client's machine. This issue occurs when files are being copied from a client to a server. During this     process, the rsync server will send checksums of local data to the client to compare with in order to     determine what data needs to be sent to the server. By sending specially constructed checksum values for     arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the     responses from the client. (CVE-2024-12086)

    A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

    A flaw was found in rsync. When using the `--safe-links` option, rsync fails to properly verify if a     symbolic link destination contains another symbolic link within it. This results in a path traversal     vulnerability, which may lead to arbitrary file write outside the desired directory. (CVE-2024-12088)

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation. (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-800 advisory.

    Placeholder CVE. Details forthcoming (CVE-2024-12085)

    Placeholder CVE. Details forthcoming (CVE-2024-12086)

    Placeholder CVE. Details forthcoming (CVE-2024-12087)

    Placeholder CVE. Details forthcoming (CVE-2024-12088)

    Placeholder CVE. Details forthcoming (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of rsync installed on the remote host is prior to 3.1.2-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2730 advisory.

    Placeholder CVE. Details forthcoming (CVE-2024-12085)

    Placeholder CVE. Details forthcoming (CVE-2024-12086)

    Placeholder CVE. Details forthcoming (CVE-2024-12087)

    Placeholder CVE. Details forthcoming (CVE-2024-12088)

    Placeholder CVE. Details forthcoming (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of rsync installed on the remote host is prior to 3.0.6-12.17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1955 advisory.

    A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This     flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a     checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
    (CVE-2024-12085)

    A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the     client's machine. This issue occurs when files are being copied from a client to a server. During this     process, the rsync server will send checksums of local data to the client to compare with in order to     determine what data needs to be sent to the server. By sending specially constructed checksum values for     arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the     responses from the client. (CVE-2024-12086)

    A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

    A flaw was found in rsync. When using the `--safe-links` option, rsync fails to properly verify if a     symbolic link destination contains another symbolic link within it. This results in a path traversal     vulnerability, which may lead to arbitrary file write outside the desired directory. (CVE-2024-12088)

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation. (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7206-1 advisory.

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync did not properly handle checksum     lengths. An attacker could use this issue to execute arbitrary code. (CVE-2024-12084)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync compared checksums with     uninitialized memory. An attacker could exploit this issue to leak sensitive information. (CVE-2024-12085)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync incorrectly handled file     checksums. A malicious server could use this to expose arbitrary client files. (CVE-2024-12086)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync mishandled symlinks for some     settings. An attacker could exploit this to write files outside the intended directory. (CVE-2024-12087)

    Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovered that rsync failed to verify symbolic link     destinations for some settings. An attacker could exploit this for path traversal attacks.
    (CVE-2024-12088)

    Aleksei Gorban discovered a race condition in rsync's handling of symbolic links. An attacker could use     this to access sensitive information or escalate privileges. (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0101 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2024-12085:
    A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This     flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a     checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1 advisory.

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21131)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21138)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
214512	RHEL 9 : rsync (RHSA-2025:0637)	Nessus	Red Hat Local Security Checks	2025/1/23	2025/7/17	high
214210	RHEL 9 : rsync (RHSA-2025:0324)	Nessus	Red Hat Local Security Checks	2025/1/15	2025/7/17	high
214236	Oracle Linux 9 : rsync (ELSA-2025-0324)	Nessus	Oracle Linux Local Security Checks	2025/1/15	2025/9/11	high
214770	RHEL 8 : rsync (RHSA-2025:0790)	Nessus	Red Hat Local Security Checks	2025/1/29	2025/7/17	high
232955	EulerOS 2.0 SP12 : rsync (EulerOS-SA-2025-1307)	Nessus	Huawei Local Security Checks	2025/3/20	2025/3/20	high
242743	NewStart CGSL MAIN 7.02 : rsync Multiple Vulnerabilities (NS-SA-2025-0152)	Nessus	NewStart CGSL Local Security Checks	2025/7/25	2025/7/25	high
214286	Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2025-801)	Nessus	Amazon Linux Local Security Checks	2025/1/17	2025/6/23	high
214140	Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2025-800)	Nessus	Amazon Linux Local Security Checks	2025/1/14	2025/6/23	high
214141	Amazon Linux 2 : rsync (ALAS-2025-2730)	Nessus	Amazon Linux Local Security Checks	2025/1/14	2025/6/23	high
214285	Amazon Linux AMI : rsync (ALAS-2025-1955)	Nessus	Amazon Linux Local Security Checks	2025/1/17	2025/6/23	high
214143	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : rsync vulnerabilities (USN-7206-1)	Nessus	Ubuntu Local Security Checks	2025/1/14	2025/6/19	high
239937	TencentOS Server 2: rsync (TSSA-2025:0101)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
242588	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1)	Nessus	Misc.	2025/7/22	2025/7/22	critical

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high

critical