CVE-2014-9512
Fixed in a distro release EPSS 6%
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.
Products: samba rsync, opensuse, oracle solaris
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rsync | 3.1.1-3 |
| Debian 13 | rsync | 3.1.1-3 |
| Debian 14 | rsync | 3.1.1-3 |
| SUSE Linux Enterprise Desktop 11 SP3 | rsync | 3.0.4-2.49.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | rsync | 3.0.4-2.49.1 |
| SUSE Linux Enterprise Desktop 12 | rsync | 3.1.0-6.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | rsync | 3.1.0-6.1 |
| SUSE Linux Enterprise Desktop 12 SP1 | rsync | 3.1.0-9.3 |
| SUSE Linux Enterprise Server 11 SP3 | rsync | 3.0.4-2.49.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | rsync | 3.0.4-2.49.1 |
| SUSE Linux Enterprise Server 11 SP4 | rsync | 3.0.4-2.49.1 |
| SUSE Linux Enterprise Server 11 SP4 | rsync | 3.0.4-2.52.1 |
| SUSE Linux Enterprise Server 12 | rsync | 3.1.0-6.1 |
| SUSE Linux Enterprise Server 12 SP1 | rsync | 3.1.0-6.1 |
| SUSE Linux Enterprise Server 12 SP1 | rsync | 3.1.0-9.3 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | rsync | 3.0.4-2.49.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | rsync | 3.0.4-2.49.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | rsync | 3.0.4-2.52.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 | rsync | 3.1.0-6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | rsync | 3.1.0-6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | rsync | 3.1.0-9.3 |
| Ubuntu 14.04 LTS | rsync | 3.1.0-2ubuntu0.2 |
| openSUSE Tumbleweed | rsync | 3.1.2-1.5 |