CVE-2024-12747

Name	CVE-2024-12747
Description	A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-4015-1, DSA-5843-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
rsync (PTS)	bullseye	3.2.3-4+deb11u1	vulnerable
	bullseye (security)	3.2.3-4+deb11u3	fixed
	bookworm	3.2.7-1	vulnerable
	bookworm (security)	3.2.7-1+deb12u2	fixed
	sid, trixie	3.3.0+ds1-4	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
rsync	source	bullseye	3.2.3-4+deb11u2	DLA-4015-1
rsync	source	bookworm	3.2.7-1+deb12u1	DSA-5843-1
rsync	source	(unstable)	3.3.0+ds1-3

Notes

https://www.openwall.com/lists/oss-security/2025/01/14/3
Fixed by: https://git.samba.org/?p=rsync.git;a=commit;h=0590b09d9a34ae72741b91ec0708a820650198b0 (v3.4.0)