Security Advisory

CVE-2014-2855

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-04-23 14:00:00
Last updated 2024-08-06 10:28:46
Assigner canonical
CVSS score not scored
State PUBLISHED

Description

The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.