File sync tool rsync is vulnerable, 660,000 servers exposed
Briefly

The most troubling vulnerability, CVE-2024-12084, permits attackers to exploit a heap-buffer overflow to execute remote code, affecting at least 660,000 exposed servers.
With Red Hat and other Linux distributions susceptible, numerous security experts highlight that the risk posed by outdated tools like rsync can lead to severe consequences.
Andrew Tridgell, the maintainer of rsync, released its first update since 2002, illustrating the challenges of maintaining older software amidst modern security threats.
The discovery of these vulnerabilities serves as a reminder that even age-old utilities remain susceptible, necessitating ongoing vigilance in the open-source community.
Read at Techzine Global
[
|
]