---

CVE-2024-12084 - log back

CVE-2024-12084 edited at 14 Jan 2025 21:27:37
Severity	- Unknown + Critical
Remote	- Unknown + Remote
Type	- Unknown + Arbitrary code execution
Description	+ A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
References
Notes

CVE-2024-12084 created at 14 Jan 2025 21:17:14