diff options
| author | Archana Polampalli <archana.polampalli@windriver.com> | 2025-01-16 15:15:04 +0000 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2025-01-25 06:20:37 -0800 |
| commit | 29909c9cf6f4362f68403760747f23556d1cfb30 (patch) | |
| tree | 62181df5faf3d16fcf243474cc8ffeb7cc37083a /scripts/lib/scriptpath.py | |
| parent | 8e4a651917faed58f9e69473267a26cd973dbeb4 (diff) | |
| download | poky-29909c9cf6f4362f68403760747f23556d1cfb30.tar.gz | |
rsync: fix CVE-2024-12084
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due
to improper handling of attacker-controlled checksum lengths (s2length) in the code.
When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write
out of bounds in the sum2 buffer.
(From OE-Core rev: ad0e13912b17ca19ffbd7ea6a366f7c968517fb2)
Signed-off-by: Archana Polampalli <archana.polampalli@windriver.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Diffstat (limited to 'scripts/lib/scriptpath.py')
0 files changed, 0 insertions, 0 deletions