Buffer overflow in Samba Rsync

CVE-2011-1097

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.

Vulnerability class: Buffer Overflow

EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.

Affected products

  • Samba Rsync — versions 3.0.0, 3.0.1, 3.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References