CVE-2024-12084
Expert Analysis
Professional remediation guidance
Get tailored security recommendations from our analyst team for CVE-2024-12084. We'll provide specific mitigation strategies based on your environment and risk profile.
CVSS Score
V3.1EPSS Score
v2025.03.14There is a 2.9% chance that this vulnerability will be exploited in the wild within the next 30 days.
Attack Vector Metrics
Impact Metrics
Description
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Available Exploits
Related News
Pexip, a leading provider of self-hosted video conferencing platforms, has released a security bulletin detailing critical vulnerabilities in its Infinity platform. Critical Heap-Based Buffer Overflow A critical vulnerability, tracked as CVE-2024-12084, has been discovered in the rsync daemon used by Pexip Infinity. This flaw is described as a “heap-based buffer …
A set of high-risk vulnerabilities has been disclosed in Rsync, the widely used file synchronization and data transfer The post CVE-2024-12084 & CVE-2024-12085: Rsync Flaws Allow Hackers to Take Over Servers, PoC Published appeared first on Cybersecurity News.
Affected Products
Unknown Product
Affected Versions:
GitHub Security Advisories
Community-driven vulnerability intelligence from GitHub
Advisory Details
CVSS Scoring
CVSS Score
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
Advisory provided by GitHub Security Advisory Database. Published: January 15, 2025, Modified: July 8, 2025