CVE-2017-15994: Critical severity samba vulnerability
rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-15994?
The severity of CVE-2017-15994 is critical with a score of 9.8.
How does CVE-2017-15994 affect rsync?
CVE-2017-15994 affects rsync version 3.1.2 and earlier.
What is the vulnerability of CVE-2017-15994?
CVE-2017-15994 is a vulnerability in rsync that mishandles archaic checksums, making it easier for remote attackers to bypass intended access restrictions.
How can remote attackers exploit CVE-2017-15994?
Remote attackers can exploit CVE-2017-15994 by leveraging the mishandling of archaic checksums to bypass access restrictions.
Is there a fix for CVE-2017-15994?
Yes, the fix for CVE-2017-15994 is available in rsync version 3.1.3-development released on October 24, 2017.