Loading HuntDB...

GHSA-xh5q-pch5-g3xq

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

Related CVEs

Key Information

GHSA ID
GHSA-xh5q-pch5-g3xq
Published
January 14, 2025 6:32 PM
Last Modified
March 20, 2025 9:30 AM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.