Arch Linux (Archlinux) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-01-15. Vendor: Archlinux.

CVEs of Arch Linux

• CVE-2024-12084 - CVSS 9.8 (critical), 2025-01-15: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in…
• CVE-2024-12086 - CVSS 6.8 (medium), 2025-01-14: A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are…
• CVE-2024-12085 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length…
• CVE-2024-12088 - CVSS 7.5 (high), 2025-01-14: A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server…
• CVE-2024-12087 - CVSS 7.5 (high), 2025-01-14: A path traversal vulnerability exists in rsync. It stems from behavior enabled by the `--inc-recursive` option, a default-enabled option for many client…
• CVE-2020-5291 - CVSS 7.8 (high), 2020-03-31: Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option…