CVE-2024-12747
MediumCVSS 5.6Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A race condition was found in rsync's handling of symbolic links. By default, rsync skips symbolic links, but an attacker can replace a regular file with a symbolic link at the right moment to bypass this behavior and traverse symbolic links.
Risk Assessment
An attacker could leak sensitive information and, depending on rsync process privileges, potentially escalate privileges within the organization.
Recommendation
Update rsync to the latest patched version immediately. Until then, consider restricting rsync process privileges and monitoring for unusual file operations.
Original NVD description (English source)
A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.