CVE-2017-15994

Critical

Published: 29/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions.

Risk Assessment

Attackers may exploit this vulnerability to gain unauthorized access to systems, potentially leading to serious security breaches.

Recommendation

It is recommended to update rsync to a version after October 24, 2017, to mitigate this vulnerability.

Original NVD description (English source)

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.