RHSA-2025%3A1451 — Vulnetix

RHSA-2025%3A1451 PUBLISHED CVSS 7.5 HIGH

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

…and 1330 more

Timeline

Feb 19, 2025 CVE Published
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Distribution Patch
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Apr 25, 2026 Security Advisory
Jul 19, 2026 CVE Updated

References

https://access.redhat.com/errata/RHSA-2025:1451 advisory
https://access.redhat.com/security/updates/classification/#important advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2329817 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2330539 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
https://issues.redhat.com/browse/OCPBUGS-48801 advisory
https://issues.redhat.com/browse/OCPBUGS-48841 advisory
https://issues.redhat.com/browse/OCPBUGS-49405 advisory
https://issues.redhat.com/browse/OCPBUGS-49890 advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_1451.json advisory
https://access.redhat.com/security/cve/CVE-2024-12085 advisory
https://www.cve.org/CVERecord?id=CVE-2024-12085 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-12085 advisory
https://kb.cert.org/vuls/id/952657 advisory
https://access.redhat.com/security/cve/CVE-2024-45337 advisory
https://www.cve.org/CVERecord?id=CVE-2024-45337 advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-45337 advisory
https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909 advisory
https://go.dev/cl/635315 advisory

…and 17 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	openshift4/ose-tests@sha256:bbd722581095c37a2d8ea09e3fd85bcafa85bc3f1d7a7594816704ef294d8255_s390x as a component of Red Hat OpenShift Container Platform 4.14	, , *
Red Hat	openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:ade9a149eff6350780f25b608aa9915e0653169629b5025bae51bad8f0d42a8d_amd64 as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-cluster-csi-snapshot-controller-rhel8-operator@sha256:ade9a149eff6350780f25b608aa9915e0653169629b5025bae51bad8f0d42a8d_amd64
Red Hat	openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:9c933ee40228d305ca6458bcbcf9068e04b6b93330b3adfbe270d60e014c484e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-prometheus-operator-admission-webhook-rhel8@sha256:9c933ee40228d305ca6458bcbcf9068e04b6b93330b3adfbe270d60e014c484e_ppc64le
Red Hat	openshift4/ose-operator-registry@sha256:83fab7d0753b8e8f9b9b55d11fda6315270687b2ac35f5ec1238db5219b1edd2_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	, openshift4/ose-operator-registry@sha256:83fab7d0753b8e8f9b9b55d11fda6315270687b2ac35f5ec1238db5219b1edd2_ppc64le,
Red Hat	openshift4/ose-ibm-vpc-block-csi-driver-rhel8@sha256:c5378dbc5dc5b5975b3cafd2467f2614d6d43394a1d31d72c80ec631d49c618c_amd64 as a component of Red Hat OpenShift Container Platform 4.14	, , *
Red Hat	openshift4/ose-csi-snapshot-controller-rhel8@sha256:732f9864b2222f538ca40be4405db70b216f536414908778f1ec74d4560fbd96_s390x as a component of Red Hat OpenShift Container Platform 4.14	, , openshift4/ose-csi-snapshot-controller-rhel8@sha256:732f9864b2222f538ca40be4405db70b216f536414908778f1ec74d4560fbd96_s390x
Red Hat	openshift4/ose-multus-admission-controller@sha256:6fcadd18c22b579a24e113d5bd56ec13a9ac478ccfc335381a147aadcb850450_s390x as a component of Red Hat OpenShift Container Platform 4.14	, , *
Red Hat	openshift4/ose-agent-installer-api-server-rhel8@sha256:9d638fb9eceb9a9212b896514fcf1b140133e0385560e86b2950346a2e99feb8_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-agent-installer-api-server-rhel8@sha256:9d638fb9eceb9a9212b896514fcf1b140133e0385560e86b2950346a2e99feb8_ppc64le
Red Hat	openshift4/ose-cluster-monitoring-operator@sha256:7b988a79d7b683965018c65ec12745cc4b09b6ed6b7970878215e3d685f14edd_s390x as a component of Red Hat OpenShift Container Platform 4.14	, , *
Red Hat	openshift4/ose-csi-node-driver-registrar-rhel8@sha256:52e4647ca73fdefb7b4655cfae5d2beb0ca3b548a8db396ee63c6eedab1d636e_amd64 as a component of Red Hat OpenShift Container Platform 4.14	, , *
Red Hat	openshift4/ose-k8s-prometheus-adapter@sha256:3b9dbc103128642c9b643367321a5ee09200ab548ffd5756bc7c8e348b6dff91_amd64 as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-k8s-prometheus-adapter@sha256:3b9dbc103128642c9b643367321a5ee09200ab548ffd5756bc7c8e348b6dff91_amd64, ,
Red Hat	openshift4/ose-telemeter@sha256:a5f3e374f93ec902bd884ae1bb7dcfde6bb5a495db9b326d67ae5a671e5fe1c4_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	*
Red Hat	openshift4/oc-mirror-plugin-rhel8@sha256:3d4b32b5b1dcecad0d18c5a4e3ed9da1729f20478f6cdafcfa7cbaa224c162c4_arm64 as a component of Red Hat OpenShift Container Platform 4.14	openshift4/oc-mirror-plugin-rhel8@sha256:3d4b32b5b1dcecad0d18c5a4e3ed9da1729f20478f6cdafcfa7cbaa224c162c4_arm64, ,
Red Hat	openshift4/ose-oauth-proxy@sha256:4aec4bc8e266920144e1eeaa2379cb36de06730dd6ff5eff5ba40ca8e7716fa0_arm64 as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-oauth-proxy@sha256:4aec4bc8e266920144e1eeaa2379cb36de06730dd6ff5eff5ba40ca8e7716fa0_arm64
Red Hat	openshift4/ose-service-ca-operator@sha256:d1b1532a8b5dc4ba7c2a5162d507b092862433e6fc38178ccd79a6f590714c42_amd64 as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-service-ca-operator@sha256:d1b1532a8b5dc4ba7c2a5162d507b092862433e6fc38178ccd79a6f590714c42_amd64, ,
Red Hat	openshift4/ose-vmware-vsphere-csi-driver-rhel8@sha256:f99ec17452acd9d1e66a934f612e024932396eb8c1ea1ad81bdc839579a544e9_amd64 as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-vmware-vsphere-csi-driver-rhel8@sha256:f99ec17452acd9d1e66a934f612e024932396eb8c1ea1ad81bdc839579a544e9_amd64
Red Hat	openshift4/ose-kube-rbac-proxy@sha256:4fdc126031af3cabd6ffe6397e9b533771841cd6a43944a7072779e5a75010db_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	*
Red Hat	openshift4/ose-agent-installer-csr-approver-rhel8@sha256:0c877eb44239e17711a6ff1aa00bb7b1fee59a93ca42b4de246c8d9e821373c2_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-agent-installer-csr-approver-rhel8@sha256:0c877eb44239e17711a6ff1aa00bb7b1fee59a93ca42b4de246c8d9e821373c2_ppc64le, ,
Red Hat	openshift4/kubevirt-csi-driver-rhel8@sha256:ca11183e40804a3aaa217df4fd134334cd04ac28de68baa5573a1a7fb7466a6f_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	openshift4/kubevirt-csi-driver-rhel8@sha256:ca11183e40804a3aaa217df4fd134334cd04ac28de68baa5573a1a7fb7466a6f_ppc64le
Red Hat	openshift4/ose-agent-installer-orchestrator-rhel8@sha256:63bc50f37e3008482e08e9891ce105579119cb3e171db238537a36be0ae73097_ppc64le as a component of Red Hat OpenShift Container Platform 4.14	openshift4/ose-agent-installer-orchestrator-rhel8@sha256:63bc50f37e3008482e08e9891ce105579119cb3e171db238537a36be0ae73097_ppc64le, ,