---
title: "CVE-2024-12085: Rsync: info leak via uninitialized stack contents"
url: https://erroneo.us/security/cve/CVE-2024-12085/
description: "CVE-2024-12085 (rsync): A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate…"
type: vulnerability-record
section: "Security Digest"
date_published: 2025-01-14
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2024-12085"
kev: false
cvss: 7.5
epss: 0.08641
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2024-12085: Rsync: info leak via uninitialized stack contents

**Signal:** High exploit likelihood. EPSS ranks it in the top 5% of all CVEs for likely exploitation in the next 30 days. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- Not in CISA KEV , but CISA’s SSVC assessment records a public proof-of-concept, so attack code exists.
- EPSS 8.6% , percentile 95: FIRST’s model estimates a 8.6% chance of exploitation activity in the next 30 days, higher than 95% of all scored CVEs (very high). EPSS is a probability, not a verdict.
- Remotely reachable with no login and no user interaction. If the vulnerable service is exposed to the internet, prioritize it.
- Editorial verdict: Check exposure. rsync: Six Flaws Incl. Daemon Heap Overflow (CVE-2024-12084) — Distros shipped fixes in January 2025 and there is no known exploitation, but internet-facing rsync daemons have since needed two more security releases, so verify you run a current rsync rather than just 3.4.0.

## What it is

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

## Affected products (CVE record)

-  rsync: <= 3.3.0
- Red Hat Red Hat Enterprise Linux 10: see advisory
- Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION: see advisory
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: see advisory
- Red Hat Red Hat Enterprise Linux 8: see advisory
- Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support: see advisory
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: see advisory
- Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service: see advisory
- Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions: see advisory
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: see advisory

## Severity

- redhat CVSS 3.1: 7.5 `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- CISA SSVC assessment: exploitation poc , automatable yes , technical impact partial .
- FIRST EPSS (model of 2026-10-21): 8.64% probability of exploitation activity in the next 30 days; percentile 95.

## Sources

- [RHBA-2025:6470](https://access.redhat.com/errata/RHBA-2025:6470)
- [RHSA-2024:6122](https://access.redhat.com/errata/RHSA-2024:6122)
- [RHSA-2025:0324](https://access.redhat.com/errata/RHSA-2025:0324)
- [RHSA-2025:0325](https://access.redhat.com/errata/RHSA-2025:0325)
- [RHSA-2025:0637](https://access.redhat.com/errata/RHSA-2025:0637)
- [RHSA-2025:0688](https://access.redhat.com/errata/RHSA-2025:0688)
- [RHSA-2025:0714](https://access.redhat.com/errata/RHSA-2025:0714)
- [RHSA-2025:0774](https://access.redhat.com/errata/RHSA-2025:0774)
- [RHSA-2025:0787](https://access.redhat.com/errata/RHSA-2025:0787)
- [RHSA-2025:0790](https://access.redhat.com/errata/RHSA-2025:0790)
- [RHSA-2025:0849](https://access.redhat.com/errata/RHSA-2025:0849)
- [RHSA-2025:0884](https://access.redhat.com/errata/RHSA-2025:0884)
- [RHSA-2025:0885](https://access.redhat.com/errata/RHSA-2025:0885)
- [RHSA-2025:1120](https://access.redhat.com/errata/RHSA-2025:1120)
- [RHSA-2025:1123](https://access.redhat.com/errata/RHSA-2025:1123)
- [RHSA-2025:1128](https://access.redhat.com/errata/RHSA-2025:1128)
- [RHSA-2025:1225](https://access.redhat.com/errata/RHSA-2025:1225)
- [RHSA-2025:1227](https://access.redhat.com/errata/RHSA-2025:1227)
- [RHSA-2025:1242](https://access.redhat.com/errata/RHSA-2025:1242)
- [RHSA-2025:1451](https://access.redhat.com/errata/RHSA-2025:1451)
- [RHSA-2025:21885](https://access.redhat.com/errata/RHSA-2025:21885)
- [RHSA-2025:2701](https://access.redhat.com/errata/RHSA-2025:2701)
- [CVE.org record CVE-2024-12085](https://www.cve.org/CVERecord?id=CVE-2024-12085)
- [NVD entry CVE-2024-12085](https://nvd.nist.gov/vuln/detail/CVE-2024-12085)
- [access.redhat.com](https://access.redhat.com/security/cve/CVE-2024-12085)
- [RHBZ#2330539](https://bugzilla.redhat.com/show_bug.cgi?id=2330539)
- [kb.cert.org](https://kb.cert.org/vuls/id/952657)
- [github.com](https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj)
- [security.netapp.com](https://security.netapp.com/advisory/ntap-20250131-0002/)
- [lists.debian.org](https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html)
- [kb.cert.org](https://www.kb.cert.org/vuls/id/952657)

---
Source page: https://erroneo.us/security/cve/CVE-2024-12085/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt