Rclone versions before 1.75.2 have a path traversal vulnerability in the local backend's translateLink function. This flaw occurs because the function trims the .rclonelink suffix after performing a containment check, allowing a crafted directory name to resolve outside the intended destination root. An attacker can exploit this by planting a directory named ...rclonelink in a source tree synced with --links and --metadata options, potentially changing ownership, timestamps, and extended attributes of the destination's parent directory.
Rclone versions from 1.52.0 up to but not including 1.75.2 contain a cross-site request forgery (CSRF) vulnerability in the pCloud backend's localhost OAuth callback. This flaw disables the state check and trusts the hostname parameter, allowing malicious web pages to send unauthorized requests to the local port during authorization. Attackers can plant tokens and API hosts, causing subsequent transfers to be redirected to attacker-controlled endpoints.
Rclone versions from 1.64.0 up to but not including 1.75.2 contain an authentication bypass vulnerability in the serve webdav feature. This flaw allows unauthenticated attackers to bypass authentication by sending OPTIONS requests. Exploitation enables attackers to probe arbitrary paths and use the Allow header values to determine the existence of files or collections, facilitating namespace enumeration.
Rclone versions before 1.75.2 have a path traversal vulnerability in the serve webdav feature. This flaw allows unauthenticated attackers to write files outside the intended served root directory by using unvalidated '..' path components. Attackers can exploit this by sending MKCOL /.. requests to create virtual file system nodes, then use PUT, MOVE, COPY, or MKCOL methods to create, overwrite, or delete files belonging to other tenants.
rclone versions from 1.56.0 up to but not including 1.75.2 have an information disclosure vulnerability in the WebDAV backend. This flaw causes custom credential headers configured by the operator to be forwarded to different hosts during HTTP 3xx redirects. An attacker who can control or influence such redirects may capture sensitive headers like X-Auth-Token and reuse them against the original WebDAV service. The vulnerability has a low severity rating with a CVSS score of 3.7.
rclone versions from 1.55.0 up to but not including 1.75.2 contain a vulnerability in the stable selfupdate mechanism. This flaw allows an attacker controlling the release distribution path to bypass signature verification by exploiting trust in checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block. As a result, the selfupdate process can be tricked into installing a malicious rclone executable.
rclone serve s3 versions from 1.75.0 up to but not including 1.75.2 contain an integer overflow vulnerability in the multipart reorder-memory accounting. This flaw allows attackers to bypass the configured buffer limit by opening two concurrent current-part PUT requests with large declared lengths, causing the signed int64 counter to wrap and retain out-of-order parts in memory, potentially exhausting system resources.
Rclone versions from 1.68.0 up to but not including 1.75.2 contain an authorization bypass vulnerability in the serve s3 --auth-proxy feature. This flaw allows authenticated tenants to manipulate multipart uploads of other tenants by referencing their upload IDs. Attackers who know a victim's bucket, object, and upload ID can inject parts, complete, or abort ongoing uploads and view metadata across tenants. The vulnerability has a medium severity with a CVSS score of 5.0.
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a heap-based buffer overflow vulnerability in the X11 animate operation. This flaw allows an attacker to supply a crafted image that, when processed with the X11 animate operation, can overwrite heap memory and crash the application. The vulnerability has a low severity score and does not impact confidentiality or integrity but can cause denial of service through application crashes.
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 have a memory leak vulnerability in the handling of the -cdl (color decision list) option. This flaw causes allocated memory not to be freed after use, potentially leading to resource exhaustion if exploited repeatedly. The vulnerability has a low severity rating and a CVSS score of 3.3. No known exploits are reported in the wild.
ImageMagick versions before 7.1.2-33 contain a memory leak vulnerability in the magick compare command. This flaw occurs due to missing cleanup when an operation fails, allowing attackers to trigger repeated failed compare operations that exhaust memory and cause denial of service. The vulnerability has a low severity score and does not impact confidentiality or integrity.
ImageMagick versions before 7.1.2-33 contain a memory leak vulnerability in the PerlMagick component. This flaw causes failure to free memory when reading image properties, allowing attackers to repeatedly trigger property reads and exhaust memory, resulting in denial of service.
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a memory leak vulnerability triggered by the use of the -set profile option. This flaw can cause memory exhaustion and potentially lead to denial of service if an attacker convinces a user to process crafted images using this option. The vulnerability has a low severity rating with a CVSS score of 3.3.
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a memory leak vulnerability in the handling of XMP profiles by various decoders. An attacker can supply images with crafted XMP profiles that cause memory to leak each time they are processed, potentially leading to resource exhaustion and denial of service. The vulnerability has a medium severity rating with a CVSS score of 5.3.
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 have a memory leak vulnerability in their XML parsing code. The leak occurs when parsing reaches the nesting depth limit, causing allocated memory not to be released. An attacker can exploit this by supplying crafted deeply nested XML data to trigger memory exhaustion, resulting in a denial of service condition.
ImageMagick versions before 7.1.2-33 contain a heap buffer overflow vulnerability affecting 32-bit systems. This flaw occurs when convex-hull information is requested, allowing attackers to supply crafted images that trigger heap memory corruption. The vulnerability can cause application crashes and may potentially allow code execution.
ImageMagick versions before 7.1.2-33 have a memory leak vulnerability in the MAT image decoder. This flaw occurs because allocated memory is not released in a specific error path. An attacker can exploit this by supplying crafted MAT files that repeatedly trigger the error, causing gradual memory consumption in the process.
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a memory leak vulnerability in the JNG encoder. This flaw causes allocated memory to not be released when processing crafted JNG images, potentially leading to resource exhaustion and a limited denial of service.
ImageMagick versions prior to 7.1.2-33 contain a memory leak vulnerability in the FPX encoder. This flaw allows attackers to supply crafted FPX images that cause repeated memory leaks, leading to resource exhaustion and denial of service. The vulnerability has a low severity rating and does not impact confidentiality or integrity.
ImageMagick versions before 6.9.13-58 and 7.x before 7.1.2-33 contain a stack-based buffer overflow vulnerability in the handling of bzip2 compressed images. This flaw allows attackers to supply crafted bzip2 compressed images that can overwrite stack memory during decoding, potentially causing crashes or memory corruption. The vulnerability has a high severity rating with a CVSS score of 8.1.