CVE-2018-5764
EUVD-2018-1753317.01.2018, 22:29
The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| samba | rsync | 𝑥 < 3.1.3 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 16.04 |
| canonical | ubuntu_linux | 17.10 |
𝑥
= Vulnerable software versions
