CVE-2024-12747: Rsync: race condition in rsync handling symbolic links

Published Dec 18, 2024
·
Updated

A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.

Affected Software

6 affected componentsFixes available
debian/rsync<=3.2.3-4+deb11u1, <=3.2.7-1
3.2.3-4+deb11u33.2.7-1+deb12u23.3.0+ds1-4
F5 BIG-IQ Centralized Management
Microsoft cbl2 rsync 3.4.1-1
Microsoft azl3 rsync 3.4.1-1
Microsoft azl3 rsync 3.2.7-1
Microsoft cbl2 rsync 3.2.5-1

Event History

Dec 18, 2024
Data Sourced
via Red Hat·07:26 AM
DescriptionSeverityAffected Software
Jan 14, 2025
CVE Published
via MITRE·05:39 PM
Data Sourced
via MITRE·05:39 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Jan 19, 2025
Data Sourced
via Ubuntu·12:07 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·12:07 AM
Description
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
DescriptionSeverity
Jan 23, 2025
News Published
via BleepingComputer·06:30 PM
News Published
via BleepingComputer·06:32 PM
Known Exploited
06:32 PM
Mar 13, 2025
Advisory Published
via F5·01:26 AM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2024-12747?

CVE-2024-12747 is considered a high-severity vulnerability due to its potential exploitation through a race condition in rsync.

2

How do I fix CVE-2024-12747?

To fix CVE-2024-12747, upgrade rsync to version 3.2.3-4+deb11u3, 3.2.7-1+deb12u2, or 3.3.0+ds1-4.

3

Which versions of rsync are affected by CVE-2024-12747?

Rsync versions up to and including 3.2.3-4+deb11u1 and 3.2.7-1 are affected by CVE-2024-12747.

4

What type of vulnerability is CVE-2024-12747?

CVE-2024-12747 is a race condition vulnerability occurring during the handling of symbolic links in rsync.

5

Can CVE-2024-12747 be exploited remotely?

Yes, CVE-2024-12747 can be exploited remotely if an attacker can replace a regular file with a symbolic link during rsync operations.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203