CVE-2024-12084: Samba Rsync buffer overflow (CVSS 9.8)

Description

A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Samba Rsync3.2.7 · 3.3.0

Almalinux10.0

Archlinux Arch Linuxall versions

Gentoo Linuxall versions

Nixos< 24.11 · 24.11

Novell Suse Linuxall versions

Redhat Enterprise Linux10.0

Tritondatacenter Smartos< 20250123

Remediation

Fixed in

Nixos≥ 24.11

Tritondatacenter Smartos≥ 20250123

Patch & vendor advisories

https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj

References

https://access.redhat.com/errata/RHBA-2025:6470
https://access.redhat.com/security/cve/CVE-2024-12084Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2330527Issue TrackingThird Party Advisory
https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqjExploitVendor Advisory
https://kb.cert.org/vuls/id/952657Third Party Advisory
https://security.netapp.com/advisory/ntap-20250131-0002/
https://www.kb.cert.org/vuls/id/952657
http://www.openwall.com/lists/oss-security/2025/01/14/6Mailing ListThird Party Advisory

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2024-12084 being actively exploited?

CVE-2024-12084 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 72.1%.

How severe is CVE-2024-12084?

CVE-2024-12084 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 72.1% probability of exploitation.

Which products are affected by CVE-2024-12084?

Affected products include Samba Rsync, Almalinux, Archlinux Arch Linux, Gentoo Linux, Nixos, and 3 more.

How do I fix CVE-2024-12084?

Upgrade affected software to a fixed version, for example Nixos 24.11, Tritondatacenter Smartos 20250123 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-12084 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo