Security researchers found six flaws in popular Rsync tool including a critical-severity RCE bug.

Tech Radar

United Kingdom

Top file synchronization tool Rsync security flaws mean up to 660,000 servers possibly affected

Future plc

The critical and high severity flaws were discovered by Google Cloud researchers. 

Introduction to Malware Binary Triage (IMBT) Course
Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any fl&hellip;

Malware Analysis, News and Indicators

Severe Rsync vulnerabilities — CVSS 9.8 — risk RCE, data leaks

Patches for six Rsync flaws, including critical CVE-2024-12084 (CVSS 9.8), released in v3.4.0. Update now.

The Hacker News

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

rsync is safe if provided with the latest patch. In fact, the old tool contains six vulnerabilities in an earlier version.

Techzine Europe

File sync tool rsync is vulnerable, 660,000 servers exposed

Six vulnerabilities have been fixed in the newest versions of Rsync (v3.4.0), two of which could be exploited by a malicious client to achieve arbitrary code execution on a machine with a running Rsync server. “The client requires only anonymous read-access to the server, such as public mirrors. Additionally, attackers can take control of a malicious server and read/write arbitrary files of any connected client. Sensitive data, such as SSH keys,…

Help Net Security

Rsync vulnerabilities allow remote code execution on servers, patch quickly! - Help Net Security

谷歌云研究人员发现 Rsync 文件同步工具漏洞

buaq.net

Rsync, a protocol and tool for file synchronization that many software products rely on, has been released in version 3.4.0. The new version fixes several security-critical vulnerabilities and introduces some technical improvements. The developers have increased the protocol number to 32. This...To the article: Rsync: Version 3.4.0 closes critical gaps 
To the blog: Caschy's blog 
You can support us with every purchase you make via Amazon. Your …

Rsync, ein Protokoll und Tool zur Dateisynchronisation, auf das viele Softwareprodukte setzen, wurde in der Version 3.4.0 veröffentlicht. Die neue Version behebt mehrere sicherheitskritische Schwachstellen und führt einige technische Verbesserungen ein. Die Entwickler haben die Protokollnummer auf 32 angehoben. Diese...Zum Beitrag: Rsync: Version 3.4.0 schließt kritische Lücken 
Zum Blog: Caschys Blog 
Du kannst uns mit jedem deiner Käufe über A…

Rsync: Version 3.4.0 schließt kritische Lücken

stadt-bremerhaven.de

Rsync: Version 3.4.0 closes critical gaps

Rsync 3.4 is out today for this widely-used utility for incrementally transferring and synchronizing files between systems. Rsync is widely-used especially for backing up Linux servers in an incremental manner and unfortunately this v3.4 release isn't some cheery news...

phoronix.com

Rsync 3.4 Released Due To Multiple, Significant Security Vulnerabilities

Rsync 3.4 debuts with patches for six security flaws, including buffer overflow and symlink handling issues, plus improved compatibility and CI updates.

Linuxiac

Rsync 3.4 Brings Patches for Six Security Vulnerabilities

Doing anything right now? Oh, you’re reading this – appreciated – but once you’re done go and install the pending update to Rsync, pushed out to all supported versions of Ubuntu desktop and server this week. Rsync is a command-line tool preinstalled in all versions and flavours of Ubuntu. It’s used for data-efficient copying and synchronising of files between locations, be it local or remote. You might not (knowingly) use it (it’s not a GUI app)…

Top file synchronization tool Rsync security flaws mean up to 660,000 servers possibly affected

Coverage Details

Bias Distribution

Ownership

Similar News Topics

Similar News Topics