Search CVE reports
61 – 70 of 75 results
Some fixes available 27 of 42
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.
4 affected packages
zsync, klibc, rsync, zlib
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zsync | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| klibc | Fixed | Fixed | Fixed | Fixed | Fixed |
| rsync | Fixed | Fixed | Fixed | Fixed | Fixed |
| zlib | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 18 of 32
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
4 affected packages
zsync, klibc, rsync, zlib
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zsync | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| klibc | Not affected | Not affected | Not affected | Not affected | Not affected |
| rsync | Fixed | Fixed | Fixed | Fixed | Fixed |
| zlib | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 29 of 42
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
4 affected packages
zsync, klibc, rsync, zlib
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zsync | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| klibc | Fixed | Fixed | Fixed | Fixed | Fixed |
| rsync | Fixed | Fixed | Fixed | Fixed | Fixed |
| zlib | Not affected | Not affected | Not affected | Not affected | Not affected |
Some fixes available 29 of 42
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.
4 affected packages
zsync, klibc, rsync, zlib
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zsync | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
| klibc | Fixed | Fixed | Fixed | Fixed | Fixed |
| rsync | Fixed | Fixed | Fixed | Fixed | Fixed |
| zlib | Not affected | Not affected | Not affected | Not affected | Not affected |
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
1 affected package
librsync
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| librsync | Not affected | Not affected | Not affected | Not affected | Vulnerable |
Some fixes available 4 of 6
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.
1 affected package
rsync
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| rsync | — | — | — | — | — |
The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.
1 affected package
rsync
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| rsync | — | — | — | — | — |
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code...
1 affected package
rsync
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| rsync | — | — | — | — | — |
sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-*.#####.log temporary file.
1 affected package
maildirsync
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| maildirsync | Vulnerable | Vulnerable | Vulnerable | Vulnerable | Vulnerable |
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
1 affected package
rsync
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| rsync | — | — | — | — | — |