CVE-2024-12747: Rsync: race condition in rsync handling symbolic links
A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.
Other sources
Rsync: race condition in rsync handling symbolic links
— Microsoft
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
This vulnerability stems from a race condition in rsync's handling of symbolic links. By exploiting timing differences, an attacker can bypass the expected behavior of skipping symbolic links during file synchronization. This flaw becomes critical in scenarios where rsync runs with elevated privileges, as it can inadvertently expose sensitive files to unprivileged users, potentially leading to privilege escalation.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/rsyncto a version that resolves this vulnerability.Fixed in 3.2.3-4+deb11u3Fixed in 3.2.7-1+deb12u2Fixed in 3.3.0+ds1-4
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-12747?
CVE-2024-12747 is considered a high-severity vulnerability due to its potential exploitation through a race condition in rsync.
How do I fix CVE-2024-12747?
To fix CVE-2024-12747, upgrade rsync to version 3.2.3-4+deb11u3, 3.2.7-1+deb12u2, or 3.3.0+ds1-4.
Which versions of rsync are affected by CVE-2024-12747?
Rsync versions up to and including 3.2.3-4+deb11u1 and 3.2.7-1 are affected by CVE-2024-12747.
What type of vulnerability is CVE-2024-12747?
CVE-2024-12747 is a race condition vulnerability occurring during the handling of symbolic links in rsync.
Can CVE-2024-12747 be exploited remotely?
Yes, CVE-2024-12747 can be exploited remotely if an attacker can replace a regular file with a symbolic link during rsync operations.