According to the versions of the rsync package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - The recv_files function in receiver.c in the daemon in     rsync 3.1.2, and 3.1.3-development before 2017-12-03,     proceeds with certain file metadata updates before     checking for a filename in the daemon_filter_list data     structure, which allows remote attackers to bypass     intended access restrictions.(CVE-2017-17433)

  - rsync 3.1.3-development before 2017-10-24 mishandles     archaic checksums, which makes it easier for remote     attackers to bypass intended access restrictions. NOTE:
    the rsync development branch has significant use beyond     the rsync developers, e.g., the code has been copied     for use in various GitHub projects.(CVE-2017-15994)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - rsync: daemon does not check for fnamecmp filenames allowing for access restriction bypass     (CVE-2017-17434)

  - rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote     attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use     beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.
    (CVE-2017-15994)

  - The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing     '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based     buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data     to the daemon. (CVE-2017-16548)

  - The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before     2017-12-03, proceeds with certain file metadata updates before checking for a filename in the     daemon_filter_list data structure, which allows remote attackers to bypass intended access restrictions.
    (CVE-2017-17433)

  - The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple
    --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection     mechanism. (CVE-2018-5764)

  - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary     files inside the directories of connecting peers. The server chooses which files/directories are sent to     the client. However, the rsync client performs insufficient validation of file names. A malicious rsync     server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rsync client target directory     and subdirectories (for example, overwrite the .ssh/authorized_keys file). (CVE-2022-29154)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the rsync package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - rsync 3.1.3-development before 2017-10-24 mishandles     archaic checksums, which makes it easier for remote     attackers to bypass intended access restrictions. NOTE:
    the rsync development branch has significant use beyond     the rsync developers, e.g., the code has been copied     for use in various GitHub projects.(CVE-2017-15994)

  - The recv_files function in receiver.c in the daemon in     rsync 3.1.2, and 3.1.3-development before 2017-12-03,     proceeds with certain file metadata updates before     checking for a filename in the daemon_filter_list data     structure, which allows remote attackers to bypass     intended access restrictions.(CVE-2017-17433)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - rsync: daemon does not check for fnamecmp filenames allowing for access restriction bypass     (CVE-2017-17434)

  - rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote     attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use     beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.
    (CVE-2017-15994)

  - The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing     '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based     buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data     to the daemon. (CVE-2017-16548)

  - The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before     2017-12-03, proceeds with certain file metadata updates before checking for a filename in the     daemon_filter_list data structure, which allows remote attackers to bypass intended access restrictions.
    (CVE-2017-17433)

  - The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple
    --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection     mechanism. (CVE-2018-5764)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - The receive_xattr function in xattrs.c in rsync 3.1.2     and 3.1.3-development does not check for a trailing     '\0' character in an xattr name, which allows remote     attackers to cause a denial of service (heap-based     buffer over-read and application crash) or possibly     have unspecified other impact by sending crafted data     to the daemon.(CVE-2017-16548)

  - The parse_arguments function in options.c in rsyncd in     rsync before 3.1.3 does not prevent multiple
    --protect-args uses, which allows remote attackers to     bypass an argument-sanitization protection     mechanism.(CVE-2018-5764)

  - The recv_files function in receiver.c in the daemon in     rsync 3.1.2, and 3.1.3-development before 2017-12-03,     proceeds with certain file metadata updates before     checking for a filename in the daemon_filter_list data     structure, which allows remote attackers to bypass     intended access restrictions.(CVE-2017-17433)

  - rsync 3.1.3-development before 2017-10-24 mishandles     archaic checksums, which makes it easier for remote     attackers to bypass intended access restrictions. NOTE:
    the rsync development branch has significant use beyond     the rsync developers, e.g., the code has been copied     for use in various GitHub projects.(CVE-2017-15994)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - rsync: daemon does not check for fnamecmp filenames allowing for access restriction bypass     (CVE-2017-17434)

  - rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote     attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use     beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.
    (CVE-2017-15994)

  - The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing     '\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based     buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data     to the daemon. (CVE-2017-16548)

  - The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before     2017-12-03, proceeds with certain file metadata updates before checking for a filename in the     daemon_filter_list data structure, which allows remote attackers to bypass intended access restrictions.
    (CVE-2017-17433)

  - The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple
    --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection     mechanism. (CVE-2018-5764)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Published	Updated	Severity
134546	EulerOS Virtualization for ARM 64 3.0.2.0 : rsync (EulerOS-SA-2020-1257)	Nessus	Huawei Local Security Checks	3/13/2020	3/22/2024	critical
196099	RHEL 6 : rsync (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
129183	EulerOS 2.0 SP5 : rsync (EulerOS-SA-2019-1989)	Nessus	Huawei Local Security Checks	9/24/2019	4/23/2024	critical
196122	RHEL 5 : rsync (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical
135659	EulerOS Virtualization 3.0.2.2 : rsync (EulerOS-SA-2020-1497)	Nessus	Huawei Local Security Checks	4/16/2020	3/15/2024	critical
196103	RHEL 7 : rsync (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	5/11/2024	5/11/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical