Approved changes feed: RSS · Atom

cpe:2.3:a:samba:rsync:3.3.0:-:*:*:*:*:*:*

part: a version: 3.3.0 update: -

VendorSamba (e90b9146-231c-5d4c-abab-30ee379c95a2)
ProductRsync (854150ec-3434-5552-8a58-9b66f85cac57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rsync purl2cpe 2026-06-01 10:11:06.153104
pkg:deb/ubuntu/rsync purl2cpe 2026-06-01 10:11:06.153105
pkg:github/bettermirror/rsync purl2cpe 2026-06-01 10:11:06.153106
pkg:rpm/fedora/rsync purl2cpe 2026-06-01 10:11:06.153108
pkg:rpm/opensuse/rsync purl2cpe 2026-06-01 10:11:06.153109

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-12084 vulnerable 2026-06-08 06:23:51.139714 Rsync: heap buffer overflow in rsync due to improper checksum length handling
CRITICAL (9.8)
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Published: 2025-01-15T14:16:35.363Z
Updated: 2026-06-29T20:31:56.456Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.