The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3ec637e6e9 advisory.

    New version 3.4.1, a couple of fixes for the 3.4.0 release.

    ----

    New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,     CVE-2024-12088, CVE-2024-12747


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 7.02, has rsync packages installed that are affected by multiple vulnerabilities:

  - A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify     if a symbolic link destination sent from the server contains another symbolic link within it. This results     in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
    (CVE-2024-12088)

  - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time. (CVE-2024-12085)

  - A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the     client's machine. This issue occurs when files are being copied from a client to a server. During this     process, the rsync server will send checksums of local data to the client to compare with in order to     determine what data needs to be sent to the server. By sending specially constructed checksum values for     arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the     responses from the client. (CVE-2024-12086)

  - A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

  - A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation. (CVE-2024-12747)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2048-1 advisory.

    This update for rsync fixes the following issues

    - CVE-2026-29518: Symlink-Race TOCTOU in Daemon (bsc#1264511).
    - CVE-2026-43617: Authorization Bypass via Hostname Resolution (bsc#1264515).
    - CVE-2026-43618: Integer Overflow Information Disclosure (bsc#1264512).
    - CVE-2026-43620: Out-of-Bounds Array Read via recv_files() (bsc#1264513).
    - CVE-2026-45232: Off-by-one stack OOB write in HTTP CONNECT proxy response parsing (bsc#1265296).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-800 advisory.

    Placeholder CVE. Details forthcoming (CVE-2024-12085)

    Placeholder CVE. Details forthcoming (CVE-2024-12086)

    Placeholder CVE. Details forthcoming (CVE-2024-12087)

    Placeholder CVE. Details forthcoming (CVE-2024-12088)

    Placeholder CVE. Details forthcoming (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of rsync installed on the remote host is prior to 3.0.6-12.15. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1954 advisory.

    Placeholder CVE. Details forthcoming (CVE-2024-12085)

    Placeholder CVE. Details forthcoming (CVE-2024-12086)

    Placeholder CVE. Details forthcoming (CVE-2024-12087)

    Placeholder CVE. Details forthcoming (CVE-2024-12088)

    Placeholder CVE. Details forthcoming (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0325 advisory.

    The rsync utility enables the users to copy and synchronize files locally or across a network.
    Synchronization with rsync is fast because rsync only sends the differences in files over the network     instead of sending whole files. The rsync utility is also used as a mirroring tool.

    Security Fix(es):

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-0325 advisory.

    [3.1.3-20]
    - Resolves: RHEL-70157 - Info Leak via Uninitialized Stack Contents

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-73c1f25730 advisory.

    New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087,     CVE-2024-12088, CVE-2024-12747.


Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of rsync installed on the remote host is prior to 3.1.2-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2731 advisory.

    A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This     flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a     checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
    (CVE-2024-12085)

    A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the     client's machine. This issue occurs when files are being copied from a client to a server. During this     process, the rsync server will send checksums of local data to the client to compare with in order to     determine what data needs to be sent to the server. By sending specially constructed checksum values for     arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the     responses from the client. (CVE-2024-12086)

    A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client. (CVE-2024-12087)

    A flaw was found in rsync. When using the `--safe-links` option, rsync fails to properly verify if a     symbolic link destination contains another symbolic link within it. This results in a path traversal     vulnerability, which may lead to arbitrary file write outside the desired directory. (CVE-2024-12088)

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation. (CVE-2024-12747)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0157-1 advisory.

    - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass.
    (bsc#1234101)
    - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data.
    (bsc#1234102)
    - CVE-2024-12087: arbitrary file overwrite possible on clients when symlink syncing is enabled.
    (bsc#1234103)
    - CVE-2024-12088: bypass of the --safe-links flag may allow the placement of unsafe symlinks in a client.
    (bsc#1234104)
    - CVE-2024-12747: Fixed a race condition in rsync handling symbolic links. (bsc#1235475)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9543:02 advisory.

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0324 advisory.

    * rsync: Info Leak via Uninitialized Stack Contents (CVE-2024-12085)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive`     option, a default-enabled option for many client options and can be enabled by the server even if not     explicitly enabled by the client. When using the `--inc-recursive` option, a lack of proper symlink     verification coupled with deduplication checks occurring on a per-file-list basis could allow a server to     write files outside of the client's intended destination directory. A malicious server could write     malicious files to arbitrary locations named after valid directories/paths on the client.(CVE-2024-12087)

    A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an     attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and     uninitialized memory and leak one byte of uninitialized stack data at a time.(CVE-2024-12085)

    A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of     symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker     replaced a regular file with a symbolic link at the right time, it was possible to bypass the default     behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could     leak sensitive information, potentially leading to privilege escalation.(CVE-2024-12747)

Tenable has extracted the preceding description block directly from the EulerOS rsync security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
214441	Fedora 41 : rsync (2025-3ec637e6e9)	Nessus	Fedora Local Security Checks	1/21/2025	6/19/2025	high
242743	NewStart CGSL MAIN 7.02 : rsync Multiple Vulnerabilities (NS-SA-2025-0152)	Nessus	NewStart CGSL Local Security Checks	7/25/2025	7/25/2025	high
316843	SUSE SLES12 Security Update : rsync (SUSE-SU-2026:2048-1)	Nessus	SuSE Local Security Checks	5/26/2026	5/26/2026	high
214140	Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2025-800)	Nessus	Amazon Linux Local Security Checks	1/14/2025	6/23/2025	high
214182	Amazon Linux AMI : rsync (ALAS-2025-1954)	Nessus	Amazon Linux Local Security Checks	1/15/2025	6/23/2025	high
214208	RHEL 8 : rsync (RHSA-2025:0325)	Nessus	Red Hat Local Security Checks	1/15/2025	7/17/2025	high
214222	Oracle Linux 8 : rsync (ELSA-2025-0325)	Nessus	Oracle Linux Local Security Checks	1/15/2025	7/17/2025	high
214263	Fedora 40 : rsync (2025-73c1f25730)	Nessus	Fedora Local Security Checks	1/16/2025	6/19/2025	high
214287	Amazon Linux 2 : rsync (ALAS-2025-2731)	Nessus	Amazon Linux Local Security Checks	1/17/2025	6/23/2025	high
214362	SUSE SLES15 Security Update : rsync (SUSE-SU-2025:0157-1)	Nessus	SuSE Local Security Checks	1/18/2025	6/23/2025	high
282932	MiracleLinux 8 : rsync-3.1.3-20.el8_10 (AXSA:2025-9543:02)	Nessus	Miracle Linux Local Security Checks	1/13/2026	1/13/2026	high
232934	RockyLinux 9 : rsync (RLSA-2025:0324)	Nessus	Rocky Linux Local Security Checks	3/19/2025	3/19/2025	high
232955	EulerOS 2.0 SP12 : rsync (EulerOS-SA-2025-1307)	Nessus	Huawei Local Security Checks	3/20/2025	3/20/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high