CVE-2018-5764

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers...

Original description

The description as published by the source.

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2018-5764 rsync Fixed in: 3.1.2-2.2

References

advisory securityfocus.com
advisory securitytracker.com
advisory download.samba.org
advisory lists.debian.org
advisory lists.debian.org
advisory lists.debian.org
advisory security.gentoo.org
advisory usn.ubuntu.com
web git.samba.org