cve/2024/CVE-2024-12085.md
2025-09-29 21:09:30 +02:00

4.1 KiB

CVE-2024-12085

Description

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

POC

Reference

Github