CVE-2024-12747
MEDIUM
MEDIUM
Priority: 0.02
BB Relevance:
26/100
Published: 2025-01-14
Modified: 2026-11-05
First seen: 2026-11-03
Status: active
Attack Surface
No Interaction
Conf. Impact
Scope Change
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
S:
Changed
C:
High
I:
None
A:
None
Description
A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.
Weakness Classification (1)
References & Advisories (10)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT