{"id":"CVE-2014-9512","aliases":["DEBIAN-CVE-2014-9512","EUVD-2014-9327","GHSA-gc42-wr8h-vr6f","SUSE-SU-2016:0173-1","SUSE-SU-2016:0176-1","SUSE-SU-2016:1866-1","SUSE-SU-2016:2151-1","UBUNTU-CVE-2014-9512","USN-2879-1","openSUSE-SU-2024:10548-1"],"status":"published","title":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in...","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06499,"percentile":0.93813,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-59"],"published":"2015-02-12T00:00:00Z","modified":"2026-10-23T15:47:28Z","fixes":[{"ecosystem":"Debian:12","package":"rsync","fixed_in":["3.1.1-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rsync","fixed_in":["3.1.1-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rsync","fixed_in":["3.1.1-3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"rsync","fixed_in":["3.0.4-2.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"rsync","fixed_in":["3.0.4-2.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"rsync","fixed_in":["3.1.0-9.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"rsync","fixed_in":["3.1.0-9.3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"rsync","fixed_in":["3.1.0-9.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"rsync","fixed_in":["3.1.0-2ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.49.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-2.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-9.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-9.3"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-9.3"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-2ubuntu0.2"}]}],"versions":["3.0.9-4ubuntu1","3.1.0-2","3.1.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.0-2ubuntu0.2"}]}],"versions":["3.0.9-4ubuntu1","3.1.0-2","3.1.0-2ubuntu0.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rsync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-1.5"}]}],"bundled":4}],"products":[{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"solaris"},{"vendor":"samba","product":"rsync"}],"references":[{"url":"http://www.securitytracker.com/id/1034786","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/76093","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201605-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00112.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-06/msg00095.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://bugzilla.samba.org/show_bug.cgi?id=10977","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","evidence","report"]},{"url":"http://xteam.baidu.com/?p=169","tags":["x_refsource_MISC","x_transferred","Exploit","evidence","report"]},{"url":"http://www.ubuntu.com/usn/USN-2879-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-02/msg00041.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT211170","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT211175","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT211171","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT211168","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://support.apple.com/kb/HT211289","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-9512"},{"url":"https://github.com/advisories/GHSA-gc42-wr8h-vr6f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-9512","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160173-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/898513","tags":["report"]},{"url":"https://bugzilla.suse.com/900914","tags":["report"]},{"url":"https://bugzilla.suse.com/915410","tags":["report"]},{"url":"https://bugzilla.suse.com/922710","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9512","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20160176-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161866-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162151-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-9512","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2879-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-9512","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1097","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2855","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2014-9512","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","status":"published","published":"2015-02-12T16:00:00Z","modified":"2024-08-06T13:47:41.551Z","updated_at":"2026-11-02T14:33:42.882687Z"}],"euvd":[{"id":"EUVD-2014-9327","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","status":"published","published":"2015-02-12T16:00:00Z","modified":"2024-08-06T13:47:41Z","updated_at":"2026-11-03T01:56:48.88782Z"}],"ghsa":[{"id":"GHSA-gc42-wr8h-vr6f","title":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in...","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","status":"published","published":"2022-05-13T01:25:01Z","modified":"2023-02-01T05:07:12Z","cwes":["CWE-59"],"updated_at":"2026-11-02T14:50:30.001937Z"}],"nvd":[{"id":"CVE-2014-9512","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","status":"published","published":"2015-02-12T16:59:01.457Z","modified":"2026-06-17T00:18:30.563Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-59"],"updated_at":"2026-11-02T14:02:58.385843Z"}],"osv":[{"id":"CVE-2014-9512","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","status":"published","published":"2015-02-12T16:59:01Z","modified":"2026-04-10T03:44:50.904652Z","updated_at":"2026-11-02T15:44:00.097545Z"},{"id":"DEBIAN-CVE-2014-9512","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","status":"published","published":"2015-02-12T16:59:01.457Z","modified":"2026-10-23T15:47:28.988915085Z","updated_at":"2026-11-02T15:45:26.442161Z"},{"id":"openSUSE-SU-2024:10548-1","title":"rsync-3.1.2-1.5 on GA media","description":"These are all security issues fixed in the rsync-3.1.2-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:30.984362Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2016:0173-1","title":"Security update for rsync","description":"\nThis update for rsync fixes two security issues and two non-security bugs.\n\nThe following vulnerabilities were fixed:\n\n- CVE-2014-8242: Checksum collisions leading to a denial of service (bsc#900914)\n- CVE-2014-9512: Malicious servers could send files outside of the transferred directory (bsc#915410)\n\nThe following non-security bugs were fixed:\n\n- bsc#922710: Prevent rsyncd from spamming the log when trying to register SLP.\n- bsc#898513: slp support broke rsync usage.\n","status":"published","published":"2016-01-19T19:35:15Z","modified":"2026-02-04T04:27:33.337513Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:0176-1","title":"Security update for rsync","description":"\nThis update for rsync fixes two security issues:\n\n- CVE-2014-8242: Checksum collisions leading to a denial of service (bsc#900914)\n- CVE-2014-9512: Malicious servers could send files outside of the transferred directory (bsc#915410)\n","status":"published","published":"2016-01-20T08:59:45Z","modified":"2026-02-04T03:24:51.609156Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2016:1866-1","title":"Security update for rsync","description":"rsync was updated to fix one security issue.\n\n- CVE-2014-9512: rsync allowed remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path (bsc#915410).\n  ","status":"published","published":"2016-07-25T09:14:43Z","modified":"2026-02-04T04:38:25.299506Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"SUSE-SU-2016:2151-1","title":"Security update for rsync","description":"rsync was updated to fix one security issue.\n\n- CVE-2014-9512: rsync allowed remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path (bsc#915410).\n  ","status":"published","published":"2016-08-24T13:43:54Z","modified":"2026-02-04T03:53:53.366912Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"UBUNTU-CVE-2014-9512","description":"rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.","status":"published","published":"2015-02-12T00:00:00Z","modified":"2026-02-04T03:01:36.316168Z","updated_at":"2026-11-02T15:54:09.378953Z"},{"id":"USN-2879-1","title":"rsync vulnerability","description":"It was discovered that rsync incorrectly handled invalid filenames. A\nmalicious server could use this issue to write files outside of the\nintended destination directory.\n","status":"published","published":"2016-01-21T18:27:00Z","modified":"2026-02-10T04:40:57Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}