CVE-2024-12747

MEDIUM Year: 2024
CVSS v3 Score
5.6
Medium
Weakness Type
CWE-362
View all →

Vulnerability Description

A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.

Related Vulnerabilities

CVE-2017-14317

MEDIUM
CVSS:5.6(Medium)

A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenst...

CWE-3622017

CVE-2017-15038

MEDIUM
CVSS:5.6(Medium)

Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users to obtain sensitive information from host heap memory via vectors related to read...

CWE-3622017

CVE-2023-38537

MEDIUM
CVSS:5.6(Medium)

A race condition in a network transport subsystem led to a heap use-after-free issue in established or unsilenced incoming audio/video calls that could have resulted in app termination or unexpected c...

CWE-3622023

CVE-2024-36285

MEDIUM
CVSS:5.6(Medium)

Race condition in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local acce...

CWE-3622024

CVE-2024-36894

MEDIUM
CVSS:5.6(Medium)

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete FFS based applications can utilize the aio_cancel() callba...

CWE-3622024

CVE-2014-0196

MEDIUM
CVSS:5.5(Medium)

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial o...

CWE-3622014