CVE-2024-12084
Out-of-bounds write in Samba Rsync
CVSS score
9.8
EPSS probability
%72.1
Risk score
7.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Makefile Go / Python
https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj
Makefile Go / Python
Similar Vulnerabilities
9.8
CVE-2012-4681 Actively exploitedVulnerability in N/a
Workaround Public Exploits:3EPSS %99
9.8
CVE-2012-1723 Actively exploitedVulnerability in N/a
Workaround Public Exploits:2EPSS %94
9.0
CVE-2021-40438 Actively exploitedmod_proxy SSRF
Patch verified Public Exploits:11EPSS %100
9.8
CVE-2017-12149 Actively exploitedDeserialization of untrusted data in Red Hat, Inc. Jbossas
Workaround Public Exploits:1EPSS %91
9.8
CVE-2016-8735 Actively exploitedVulnerability in Apache Tomcat
Partial patch Public Exploits:1EPSS %90
8.8
CVE-2026-42271 Actively exploitedCommand injection in Litellm
Patch verified Public Exploits:3EPSS %93
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-12084"