Is CVE-2024-12085 in the CISA KEV catalog?

No. CVE-2024-12085 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-12085?

CVE-2024-12085 has a CVSS v3 base score of 7.5 (HIGH).

What is the EPSS score for CVE-2024-12085?

CVE-2024-12085 has an EPSS score of 8.65% (95th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-12085?

Upgrade rsync on debian 11 to 3.2.3-4+deb11u2 or later. Fixes are available for 366 affected products.

CVE & CISA-KEV Catalog

CVE-2024-12085

HIGHEPSS 95th pctl

7.5

CVSS v3

NVD

Description

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

CWE-908

How to fix

Remediation Available

rsyncDebian

Fixed in:3.2.3-4+deb11u2CVE-2024-12085

Fixed in:3.2.7-1+deb12u1CVE-2024-12085

Fixed in:3.3.0+ds1-3CVE-2024-12085

openshiftRocky

Fixed in:logging/vector-rhel9@sha256:ecaea646ed648d89b00208cad413f429f7c73c6b7b7ff0187a3e2c7fc9943196_arm64RHSA-2025:1225

Fixed in:logging/fluentd-rhel9@sha256:e15eecf4b824e54f22facd4468460d50718cf8c493370d7486cc3b22e3be1545_arm64RHSA-2025:1227

Fixed in:logging/eventrouter-rhel9@sha256:35eaf2f960a2da7a255a75819bedf7eb297a12a0558c50a86112038d0dd3c9ce_arm64RHSA-2025:1225

Fixed in:logging/fluentd-rhel9@sha256:d0bdeb144c17bb5951c21b4a1f824a707fe25e94dfd778f092c6f49e947a6182_arm64RHSA-2025:1225

Fixed in:logging/vector-rhel9@sha256:7dd223063442cc5c9244678da6288c25fd0dac3a786288c34def7a029e15e012_amd64RHSA-2025:1225

Fixed in:logging/fluentd-rhel9@sha256:6253646d49884891a42e88f426b6d6248fc80ef81787b86d67980b086e54f602_s390xRHSA-2025:1225

Fixed in:logging/vector-rhel9@sha256:2bc46a3bc604803d23134592cd9b64bc5a4421e8ae88453a5b4b65dea0648d55_s390xRHSA-2025:1225

Fixed in:logging/eventrouter-rhel9@sha256:62a3fb23bd1d405a87d94a9a93ad2b3dd1d44d9eb2d062cf40cb48469e2fe754_s390xRHSA-2025:1227

Fixed in:logging/fluentd-rhel9@sha256:ff369dce86ef0a6dc6fd0f9a84c191f5fc5551d5fa80bf06017cc97c134b8218_s390xRHSA-2025:1227

Fixed in:logging/vector-rhel9@sha256:46a7a38202e74ffcd0c64be726ee0a05ca61b0b3d8676fffc9b2156da8cfcf11_arm64RHSA-2025:1227

Fixed in:logging/eventrouter-rhel9@sha256:f937390944ecd159bca06b91289e847a00a3949c29823e8a9f9490cf2aaa5671_arm64RHSA-2025:1227

Fixed in:logging/vector-rhel9@sha256:85a2ee2d4df59d237ebb12c7700ed0b6439c1330aae341c3909f56de73128d66_s390xRHSA-2025:1227

Fixed in:logging/elasticsearch6-rhel9@sha256:7ef9fb3e1337c5e143d2ff6a20373c6ff94aa4e9cc625748ce38aa274e736be6_s390xRHSA-2025:1225

Fixed in:logging/elasticsearch6-rhel9@sha256:87c88987883ede216c3fabdf580a8bd2b66c22e782d6197f730b56745cfee106_amd64RHSA-2025:1225

Fixed in:logging/eventrouter-rhel9@sha256:cb93b7187ecfb64a521939c704613d5db05bb4609582a649e0ee000df1b8bf36_amd64RHSA-2025:1225

Fixed in:logging/vector-rhel9@sha256:d6635aa3bab153729e5d41bdc077f0596cae86dcbe50735148956ad82ccd8c36_ppc64leRHSA-2025:1225

Fixed in:logging/eventrouter-rhel9@sha256:0ac67161ce4919637cba2694b56ca5d00089b309678a1047e22c05ef9a8cc8b4_s390xRHSA-2025:1225

Fixed in:logging/fluentd-rhel9@sha256:87e4ad39e6d4eee645caaaa8266c5fc97c4e8308e248536842b05c589eb31ba3_ppc64leRHSA-2025:1225

Fixed in:logging/eventrouter-rhel9@sha256:4128ee491db22e4088eb5fa43a7d2600ebb2fe6c2695cb8b881539df5c70a931_ppc64leRHSA-2025:1225

Fixed in:logging/elasticsearch6-rhel9@sha256:892f382eddcbefc09c3d255c6c7300b2f6a7273927c23ea96e9cfbdba73d6d82_ppc64leRHSA-2025:1225

Fixed in:logging/fluentd-rhel9@sha256:6179df84a1afd1e5c4fd0e82a8c3c1bd7083178e9dc431fe5f00a9a874a43f35_amd64RHSA-2025:1225

Fixed in:logging/vector-rhel9@sha256:8d570ea2e7f197a56dab73f36728c8afd66a2f886458444a37cb5d7f603ca2e2_amd64RHSA-2025:1227

Fixed in:logging/fluentd-rhel9@sha256:67927403108d96de2c1611c578a17e32afa8c6dadf62a96d3378efc16bd20396_amd64RHSA-2025:1227

Fixed in:logging/eventrouter-rhel9@sha256:a64fff60352252e6f0200e8f041f3216bad06320c95c6840da2e9c51fcab480c_amd64RHSA-2025:1227

Fixed in:logging/vector-rhel9@sha256:dbb2f1221cec4aec7349496fae6f5136012eedfe4c54751fee25e68da7cd0ed1_ppc64leRHSA-2025:1227

Fixed in:logging/elasticsearch6-rhel9@sha256:111c2ce3a570549c3372c57dc550f314af9031d84fce668c1382406905d49725_arm64RHSA-2025:1225

Fixed in:logging/fluentd-rhel9@sha256:d0516cdb390b87797550ccd54b92d8986c1742f405f8b894df7b61a474801a68_ppc64leRHSA-2025:1227

Fixed in:logging/eventrouter-rhel9@sha256:cfdb5836eb9828b86977aec2186906bc9c12b80eca4ab066ca13e542d797f921_ppc64leRHSA-2025:1227

openshiftRed Hat / RHEL