tocsin

Alpine/rsync: low 3.7

Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to corrupt stack memory

Action: Upgrade rsync to 3.4.3-r0 or later.

Affected

introducedfixedlast affected
03.4.3-r0-

Fixed versions

3.4.3-r0

Sources

published · modified · JSON