CVE-2014-9512: opensuse Link Following
CVSS: 6.4v2.0MediumModified
AliasesSUSE-SU-2016:1866-1SUSE-SU-2016:2151-1UBUNTU-CVE-2014-9512USN-2879-1DEBIAN-CVE-2014-9512
Published 12-02-2015Last modified 06-08-2024
Vulnerability summary
CVE-2014-9512 is a medium (CVSS 6.4) Link Following vulnerability in opensuse. EPSS estimates a 6.50% chance of exploitation in the next 30 days, higher than 93.7% of scored vulnerabilities. 2 public exploits are recorded.
CVSS score
6.4/10
010
Medium · v2.0 (NVD)EPSS score
6.50%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference
Advisory lineage
Upstream 0 · Downstream 3 · Related 3Timeline
- 12-02-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.4Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:P/A:PSourcesSingle source
EPSS trend
Probability
6.50%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 6.50% on 20-09-2026
20-09-202620-10-2026
EPSS score6.50%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (bugzilla.samba.org)
Maturity: unknown
Exploit Reference (xteam.baidu.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Suse5 products
- rsync&distro=SUSE Linux Enterprise Desktop 12 SP1< 3.1.0-9.3
- rsync&distro=SUSE Linux Enterprise Server 11 SP4< 3.0.4-2.52.1
- rsync&distro=SUSE Linux Enterprise Server 12 SP1< 3.1.0-9.3
- rsync&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4< 3.0.4-2.52.1
- rsync&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1< 3.1.0-9.3
Debian1 product
- rsync< 3.1.1-3
Opensuse1 product
- opensuseEOL13.1 | 13.2
Oracle1 product
- solarisEOL10.0 | 11.3
Samba1 product
- rsync3.1.1
Ubuntu1 product
- rsync< 3.1.0-2ubuntu0.2
6 vendors · 10 products
References
23 links- lists.opensuse.org/opensuse-updates/2016-06/msg00112.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- lists.opensuse.org/opensuse-updates/2015-02/msg00041.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
- www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.htmlX Refsource CONFIRMThird Party Advisory
Show all 23 references
- support.apple.com/kb/HT211170X Refsource CONFIRM
- support.apple.com/kb/HT211175X Refsource CONFIRM
- support.apple.com/kb/HT211171X Refsource CONFIRM
- support.apple.com/kb/HT211168X Refsource CONFIRM
- support.apple.com/kb/HT211289X Refsource CONFIRM
- bugzilla.suse.com/915410REPORT
