Riskcovery

CVE-2024-12088

Rsync: --safe-links option bypass leads to path traversal

State
Published
Severity
6.5 Medium
Published
Jan 14, 2025
Updated
Oct 21, 2026
Reserved
Dec 3, 2024

Read the record on cve.org

Description

A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:Nredhat

Weaknesses

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

ProductVersions
rsync
  • 3.3.0 and earlierAffected
Red Hat Enterprise Linux 10Red Hat
  • 0:3.4.1-2.el10 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:3.1.3-21.el8_10 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:3.2.5-3.el9 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:3.2.5-3.el9 and laterNot affected
Red Hat Discovery 1.14Red Hat
  • 1.14.2-1748467619 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
    Red Hat Enterprise Linux 7Red Hat
      Red Hat OpenShift Container Platform 4Red Hat

        References

        Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.