CVE-2024-12085: Samba Rsync vulnerability (CVSS 7.5)

Description

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

Redhat Openshift5.0

Redhat Openshift Container Platform4.12 · 4.13 · 4.14 · 4.15

Samba Rsync< 3.3.0

Almalinux10.0 · 8.0 · 9.0

Archlinux Arch Linuxall versions

Gentoo Linuxall versions

Nixos< 24.11

Redhat Enterprise Linux8.0 · 9.0

Redhat Enterprise Linux Eus8.8 · 9.2 · 9.4 · 9.6

Redhat Enterprise Linux For Arm 648.0_aarch64 · 9.0_aarch64 · 9.2_aarch64

Redhat Enterprise Linux For Arm 64 Eus8.8_aarch64 · 9.4_aarch64 · 9.6_aarch64

Redhat Enterprise Linux For Ibm Z Systems8.0_s390x · 9.0_s390x · 9.2_s390x

Redhat Enterprise Linux For Ibm Z Systems Eus8.8_s390x · 9.4_s390x · 9.6_s390x

Redhat Enterprise Linux For Power Little Endian8.0_ppc64le · 8.8_ppc64le · 9.0_ppc64le · 9.2_ppc64le

Redhat Enterprise Linux For Power Little Endian Eus9.4_ppc64le · 9.6_ppc64le

Redhat Enterprise Linux Server6.0 · 7.0

Redhat Enterprise Linux Server Aus8.2 · 8.4 · 8.6 · 9.2

Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions8.4_ppc64le · 8.6_ppc64le · 8.8_ppc64le · 9.0_ppc64le

Redhat Enterprise Linux Server Tus8.4 · 8.6 · 8.8

Redhat Enterprise Linux Update Services For Sap Solutions8.4 · 8.6 · 9.0 · 9.2

Suse Linuxall versions

Tritondatacenter Smartos< 20250123

Remediation

Fixed in

Samba Rsync≥ 3.3.0

Nixos≥ 24.11

Tritondatacenter Smartos≥ 20250123

References

https://access.redhat.com/errata/RHBA-2025:6470
https://access.redhat.com/errata/RHSA-2024:6122
https://access.redhat.com/errata/RHSA-2025:0324Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0325Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0637Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0688Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0714Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0774Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0787Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:0790Third Party Advisory

and 19 more references

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2024-12085 being actively exploited?

CVE-2024-12085 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 8.82%.

How severe is CVE-2024-12085?

CVE-2024-12085 has a CVSS 3.1 base score of 7.5, rated high. EPSS estimates a 8.82% probability of exploitation.

Which products are affected by CVE-2024-12085?

Affected products include Redhat Openshift, Redhat Openshift Container Platform, Samba Rsync, Almalinux, Archlinux Arch Linux, and 17 more.

How do I fix CVE-2024-12085?

Upgrade affected software to a fixed version, for example Samba Rsync 3.3.0, Nixos 24.11, Tritondatacenter Smartos 20250123 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2024-12085 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo