CVE-2024-12085
â ī¸ highSummary
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
CVSS Score
7.5
High
EPSS Score
9.4
Exploit Probability
Published Date
2025-01-14
First Seen: 2026-01-04
đ Relative Risk Intelligence
This CVE is Moderate Risk - more severe than 68.9% of all 330,193 vulnerabilities in our database.
#102,656
Above average severity
Severity Percentile
đ¯ CISA SSVC Assessment Updated: Feb 27, 2025
đ Exploitation Status
Poc
Proof-of-concept available
âī¸ Automatable
YES
Can be exploited automatically
đĨ Technical Impact
Partial
Limited system impact
đ Discovered By
Red Hat would like to thank Jasiel Spelman (Google), Pedro Gallegos (Google), and Simon Scannell (Google) for reporting this issue.
SSVC data provided by
CISA
Last Modified
2026-06-25
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)