Threats affecting pkg:github/rsync/rsync

CVE-2024-12084 is a critical heap-based buffer overflow vulnerability in the rsync daemon caused by improper handling of attacker-controlled checksum lengths. This flaw allows an attacker to write out of bounds in the sum2 buffer when the checksum length exceeds expected limits. The vulnerability affects rsync versions 3.2.7 and 3.3.0. A high-severity fix is available and has been incorporated in Red Hat Enterprise Linux 10 updates.