CVE-2024-12084
CRITICALrsync - Heap-based Buffer Overflow via Checksum Length Handling
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2024-12084. PoCs published by themirze, InkeyP, rxerium.
AI-analyzed exploit summary This script scans for Rsync services on a list of IPs and tests for write permissions in accessible modules. It does not exploit CVE-2024-12084 but checks for conditions that might indicate vulnerability.
Description
A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
Exploits (3)
This script scans for Rsync services on a list of IPs and tests for write permissions in accessible modules. It does not exploit CVE-2024-12084 but checks for conditions that might indicate vulnerability.
This repository contains a functional exploit PoC for CVE-2024-12084, targeting a vulnerability in rsync. The exploit demonstrates a complex interaction with the rsync daemon, including handshake negotiation, file list parsing, and multiplexing to achieve remote code execution.
This repository contains a Nuclei template for detecting rsync servers vulnerable to CVE-2024-12084 by checking the protocol version (31.0). It does not include exploit code but provides a detection method based on version mapping.
References (8)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H