CVE-2024-12087
high-risk
Published 2025-01-14
A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client options and can be enabled by the server even if not explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to write files outside of the client's intended destination directory. A malicious server could write malicious files to arbitrary locations named after valid directories/paths on the client.
Do I need to act?
~
3.2% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.5/10
Medium
NETWORK
/ LOW complexity
Affected Products (20)
Rsync
Arch Linux
Linux
Nixos
Smartos
References (19)
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:2600
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:7050
Third Party Advisory
https://access.redhat.com/errata/RHSA-2025:8385
Third Party Advisory
https://access.redhat.com/security/cve/CVE-2024-12087
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2330672
Third Party Advisory
https://kb.cert.org/vuls/id/952657
51
/ 100
high-risk
Severity
24/34 · High
Exploitability
6/34 · Minimal
Exposure
21/34 · High