Debian/rsync: high 7.4
A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate with host mismatch vulnerability. A remote, unauthenticated attacker could exploit the flaw by performing
Action: Upgrade rsync to 3.2.3-3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.3-3 | - |
Fixed versions
| 3.2.3-3 |
Sources
- osv: DEBIAN-CVE-2020-14387#Debian:14/rsync
- https://security-tracker.debian.org/tracker/CVE-2020-14387
published · modified · JSON