Debian/lsyncd: unknown

default-rsyncssh.lua in Lsyncd 2.1.5 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in a filename.

Action: Upgrade lsyncd to 2.1.5-2 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2014-8990#Debian:13/lsyncd
• https://security-tracker.debian.org/tracker/CVE-2014-8990

published 2014-12-05T16:59:11.707Z · modified 2026-10-23T15:47:37.699962842Z · JSON