CVE-2024-12085: Rsync: info leak via uninitialized stack contents

Rsync: info leak via uninitialized stack contents

— Microsoft

The attacker can exploit this vulnerability to leak uninitialized stack data byte by byte, potentially exposing memory locations of critical data.It uses a buffer (sum2) on the stack to store part of the checksum but does not initialize this buffer. An attacker can manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory. This allows an attacker to leak one byte of uninitialized stack data at a time. Over multiple requests, the attacker can leak up to MAXDIGESTLEN - 8 bytes of sensitive data, which could help defeat Address Space Layout Randomization (ASLR).

— Red Hat

This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.

— Launchpad