CVE Feed

    Dashboard / CVE / CVE-2024-12085

    CVE-2024-12085

    A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

    Published:Jan 14, 2025
    Last Modified:Aug 31, 2026
    EPS:Jan 14, 2025
    EPSS Score:0.08823
    CVSS Score:7.5

    Affected Products

    Vendor
    Almalinux
    Product
    Almalinux
    Vendor
    Archlinux
    Product
    Arch Linux
    Vendor
    Gentoo
    Product
    Linux
    Vendor
    Nixos
    Product
    Nixos
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Arm 64
    Vendor
    Redhat
    Product
    Enterprise Linux For Arm 64 Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems
    Vendor
    Redhat
    Product
    Enterprise Linux For Ibm Z Systems Eus
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian
    Vendor
    Redhat
    Product
    Enterprise Linux For Power Little Endian Eus
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Server Aus
    Vendor
    Redhat
    Product
    Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Enterprise Linux Server Tus
    Vendor
    Redhat
    Product
    Enterprise Linux Update Services For Sap Solutions
    Vendor
    Redhat
    Product
    Logging
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Openshift Compliance Operator
    Vendor
    Redhat
    Product
    Openshift Container Platform
    Vendor
    Redhat
    Product
    Rhel Aus
    Vendor
    Redhat
    Product
    Rhel E4s
    Vendor
    Redhat
    Product
    Rhel Els
    Vendor
    Redhat
    Product
    Rhel Eus
    Vendor
    Redhat
    Product
    Rhel Tus
    Vendor
    Samba
    Product
    Rsync
    Vendor
    Suse
    Product
    Suse Linux
    Vendor
    Tritondatacenter
    Product
    Smartos

    Exploits

    https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqjhttps://github.com/Otsutez/cve-2024-12085

    References

    https://access.redhat.com/errata/RHBA-2025:6470
    https://access.redhat.com/errata/RHSA-2024:6122
    https://access.redhat.com/errata/RHSA-2025:0324
    https://access.redhat.com/errata/RHSA-2025:0325
    https://access.redhat.com/errata/RHSA-2025:0637
    https://access.redhat.com/errata/RHSA-2025:0688
    https://access.redhat.com/errata/RHSA-2025:0714
    https://access.redhat.com/errata/RHSA-2025:0774
    https://access.redhat.com/errata/RHSA-2025:0787
    https://access.redhat.com/errata/RHSA-2025:0790
    https://access.redhat.com/errata/RHSA-2025:0849
    https://access.redhat.com/errata/RHSA-2025:0884
    https://access.redhat.com/errata/RHSA-2025:0885
    https://access.redhat.com/errata/RHSA-2025:1120
    https://access.redhat.com/errata/RHSA-2025:1123
    https://access.redhat.com/errata/RHSA-2025:1128
    https://access.redhat.com/errata/RHSA-2025:1225
    https://access.redhat.com/errata/RHSA-2025:1227
    https://access.redhat.com/errata/RHSA-2025:1242
    https://access.redhat.com/errata/RHSA-2025:1451
    https://access.redhat.com/errata/RHSA-2025:21885
    https://access.redhat.com/errata/RHSA-2025:2701
    https://access.redhat.com/security/cve/CVE-2024-12085
    https://bugzilla.redhat.com/show_bug.cgi?id=2330539
    https://kb.cert.org/vuls/id/952657
    https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html
    https://security.netapp.com/advisory/ntap-20250131-0002/
    https://www.kb.cert.org/vuls/id/952657
    https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High