commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q, or -P.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command     line, which allows attackers to have a bad impact by triggering use of an option other than -v, -n, -q,     or -P. (CVE-2018-20683)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command
    line, which allows attackers to have a "bad" impact by triggering use of an option other than -v, -n, -q,
    or -P. (CVE-2018-20683)

This update for gitolite fixes the following security issue :

  - CVE-2018-20683: The rsync command line was not handled     correctly, allow malicious rsync options (boo#1121570)

The version update to 3.6.11 also contains a number of upstream bug fixes.

ID	Name	Product	Family	Severity
253733	Linux Distros Unpatched Vulnerability : CVE-2018-20683	Nessus	Misc.	high
423907	Alpine: gitolite: security update to 3.6.11-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
423907	Alpine: gitolite: security update to 3.6.11-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
400563	Alpine: gitolite: security update to 3.6.10-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	high
400563	Alpine: gitolite: security update to 3.6.10-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
121283	openSUSE Security Update : gitolite (openSUSE-2019-54)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2018-20683

high

Tenable Plugins

high

high

high

high

high

high