The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0324 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0637 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0790 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0884 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0885 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0165-1 advisory.

    - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass.
    (bsc#1234101)
    - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data.
    (bsc#1234102)
    - CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled.
    (bsc#1234103)
    - CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client.
    (bsc#1234104)
    - CVE-2024-12747: Fixed a race condition in rsync handling symbolic links. (bsc#1235475)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify     if a symbolic link destination sent from the server contains another symbolic link within it. This results     in a path traversal vulnerability, which may lead to arbitrary file write outside the desired     directory.(CVE-2024-12088)

    A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client.(CVE-2024-12087)

    A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the     client's machine. This issue occurs when files are being copied from a client to a server. During this     process, the rsync server will send checksums of local data to the client to compare with in order to     determine what data needs to be sent to the server. By sending specially constructed checksum values for     arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the     responses from the client.(CVE-2024-12086)

    A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time.(CVE-2024-12085)

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation.(CVE-2024-12747)

Tenable has extracted the preceding description block directly from the EulerOS rsync security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5843 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5843-2                   security@debian.org     Debian Security Advisory DSA-5843-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     January 16, 2025                      https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : rsync     Debian Bug     : 1093052 1093089     CVE ID         : CVE-2024-12084 CVE-2024-12085 CVE-2024-12086 CVE-2024-12087                      CVE-2024-12088 CVE-2024-12747

    The update for rsync announced in DSA 5843-1 introduced a regression     when using the -H option to preserve hard links. Updated packages are     now available to correct this issue.

    Several vulnerabilities were discovered in rsync, a fast, versatile,     remote (and local) file-copying tool.

    CVE-2024-12084

        Simon Scannell, Pedro Gallegos and Jasiel Spelman discovered a         heap-based buffer overflow vulnerability due to improper handling of         attacker-controlled checksum lengths. A remote attacker can take         advantage of this flaw for code execution.

    CVE-2024-12085

        Simon Scannell, Pedro Gallegos and Jasiel Spelman reported a flaw in         the way rsync compares file checksums, allowing a remote attacker to         trigger an information leak.

    CVE-2024-12086

        Simon Scannell, Pedro Gallegos and Jasiel Spelman discovered a flaw         which would result in a server leaking contents of an arbitrary file         from the client's machine.

    CVE-2024-12087

        Simon Scannell, Pedro Gallegos and Jasiel Spelman reported a path         traversal vulnerability in the rsync daemon affecting the
        --inc-recursive option, which could allow a server to write files         outside of the client's intended destination directory.

    CVE-2024-12088

        Simon Scannell, Pedro Gallegos and Jasiel Spelman reported that when         using the --safe-links option, rsync fails to properly verify if a         symbolic link destination contains another symbolic link with it,         resulting in path traversal and arbitrary file write outside of the         desired directory.

    CVE-2024-12747

        Aleksei Gorban loqpa discovered a race condition when handling         symbolic links resulting in an information leak which may enable         escalation of privileges.

    For the stable distribution (bookworm), these problems have been fixed in     version 3.2.7-1+deb12u2.

    We recommend that you upgrade your rsync packages.

    For the detailed security status of rsync please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/rsync

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of rsync installed on the remote host is prior to 3.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2025-014-01 advisory.

    New rsync packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the rsync security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2038-1 advisory.

    This update for rsync fixes the following issues


    - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511).
    - CVE-2026-41035: Count of entries mismatch can lead to a use-after-free (bsc#1262223)
    - CVE-2026-43617: Authorization Bypass via Hostname Resolution (bsc#1264515).
    - CVE-2026-43618: Integer Overflow Information Disclosure (bsc#1264512).
    - CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls (bsc#1264514).
    - CVE-2026-43620: Out-of-Bounds Array Read via recv_files() (bsc#1264513).
    - CVE-2026-45232: Off-by-one stack OOB write in HTTP CONNECT proxy response parsing (bsc#1265296).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2083-1 advisory.

    This update for rsync fixes the following issues

    - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511).
    - CVE-2026-41035: count of entries mismatch can lead to a use-after-free (bsc#1262223).
    - CVE-2026-43617: Authorization Bypass via Hostname Resolution (bsc#1264515).
    - CVE-2026-43618: Integer Overflow Information Disclosure (bsc#1264512).
    - CVE-2026-43620: Out-of-Bounds Array Read via recv_files() (bsc#1264513).
    - CVE-2026-45232: Off-by-one stack OOB write in HTTP CONNECT proxy response parsing (bsc#1265296).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 7.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.0.1 advisory.

  - BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many     selectors. (CVE-2019-12900)

  - A vulnerability was found in PAM. The secret information is stored in memory, where the attacker can     trigger the victim program to execute by sending characters to its standard input (stdin). As this occurs,     the attacker can train the branch predictor to execute an ROP chain speculatively. This flaw could result     in leaked passwords, such as those found in /etc/shadow while performing authentications. (CVE-2024-10041)

  - A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as     hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname,     gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who     can access certain services or terminals. (CVE-2024-10963)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM     Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21131)

  - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of     Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411,     8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle     GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to exploit vulnerability allows unauthenticated     attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized     ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK,     Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the     specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also     applies to Java deployments, typically in clients running sandboxed Java Web Start applications or     sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and     rely on the Java sandbox for security. (CVE-2024-21138)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
214210	RHEL 9 : rsync (RHSA-2025:0324)	Nessus	Red Hat Local Security Checks	1/15/2025	7/17/2025	high
214512	RHEL 9 : rsync (RHSA-2025:0637)	Nessus	Red Hat Local Security Checks	1/23/2025	7/17/2025	high
214770	RHEL 8 : rsync (RHSA-2025:0790)	Nessus	Red Hat Local Security Checks	1/29/2025	7/17/2025	high
214911	RHEL 8 : rsync (RHSA-2025:0884)	Nessus	Red Hat Local Security Checks	2/3/2025	7/17/2025	high
214919	RHEL 8 : rsync (RHSA-2025:0885)	Nessus	Red Hat Local Security Checks	2/3/2025	7/17/2025	high
214360	SUSE SLES15 Security Update : rsync (SUSE-SU-2025:0165-1)	Nessus	SuSE Local Security Checks	1/18/2025	6/23/2025	high
234175	EulerOS 2.0 SP11 : rsync (EulerOS-SA-2025-1377)	Nessus	Huawei Local Security Checks	4/11/2025	4/11/2025	high
214097	Debian dsa-5843 : rsync - security update	Nessus	Debian Local Security Checks	1/14/2025	6/19/2025	high
214145	Slackware Linux 15.0 / current rsync Multiple Vulnerabilities (SSA:2025-014-01)	Nessus	Slackware Local Security Checks	1/14/2025	6/19/2025	high
316960	SUSE SLED15 / SLES15 Security Update : rsync (SUSE-SU-2026:2038-1)	Nessus	SuSE Local Security Checks	5/27/2026	5/27/2026	high
317660	SUSE SLES15 Security Update : rsync (SUSE-SU-2026:2083-1)	Nessus	SuSE Local Security Checks	5/29/2026	5/29/2026	high
242588	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1)	Nessus	Misc.	7/22/2025	7/22/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

critical