Path traversal in Rsync - CVE-2022-29154

Vulnerability identifier: #VU66189

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-29154

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote server to perform directory traversal attacks.

The vulnerability exists due to input validation error within the rsync client  when processing file names. A remote malicious server overwrite arbitrary files in the rsync client target directory and subdirectories on the connected peer.

Rsync
VMware Tanzu Application Service for VMs
Isolation Segment
Red Hat Advanced Cluster Management for Kubernetes
Red Hat Advanced Cluster Security for Kubernetes
Dell Secure Connect Gateway
OpenShift Logging
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Robotic Process Automation
Amazon Linux AMI
Gentoo Linux
SUSE CaaS Platform
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Micro
openSUSE Leap Micro
SUSE Linux Micro
SUSE Enterprise Storage
CentOS
Anolis OS
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux Workstation
SUSE Linux Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
Slackware Linux
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
openSUSE Leap
Ubuntu
openEuler
Fedora
Dell Data Protection Central
Dell EMC PowerProtect Data Protection
cflinuxfs3
Cloud Pak for Network Automation
PowerStore T
IBM Cloud Pak for Watson AIOps
Platform Automation Toolkit
XtremIO X2
OpenShift API for Data Protection (OADP)
OpenShift sandboxed containers
Multicluster Engine for Kubernetes
Red Hat Virtualization
OpenShift Virtualization
VMware Tanzu Operations Manager
OpenShift Data Foundation (formerly OpenShift Container Storage)
Migration Toolkit for Containers
Red Hat OpenShift Container Platform
Red Hat Virtualization Host
RSA Authentication Manager
redhat-virtualization-host-productimg (Red Hat package)
redhat-release-virtualization-host (Red Hat package)
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
rsync
rsync-debugsource
rsync-debuginfo
rsync (Ubuntu package)
rsync (Red Hat package)
rsync-help
rsync-daemon
LANTIME Operating System Firmware (LTOS)
IBM Qradar SIEM
Cloud Pak for Security (CP4S)
IBM Security Verify Access
IBM Security Guardium
Dell EMC NetWorker vProxy
Dell EMC VxRail Appliance
IBM QRadar Network Packet Capture

Install update from vendor's website.

Rsync - update to 3.2.5pre1
OpenShift API for Data Protection (OADP) - addressed in versions 1.0.4, 1.1.0
OpenShift sandboxed containers - update to 1.3.1
Migration Toolkit for Containers - update to 1.7.4
Multicluster Engine for Kubernetes - addressed in versions 2.0.2, 2.1
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.3.12, 2.4.6, 2.5.2, 2.6.0
Red Hat Advanced Cluster Security for Kubernetes - update to 3.72
Red Hat OpenShift Container Platform - addressed in versions 3.11.784, 4.6.61, 4.7.59, 4.8.49, 4.9.48, 4.10.31, 4.11.3, 4.13.0
redhat-virtualization-host-productimg (Red Hat package) - update to 4.5.2-1.el8
redhat-release-virtualization-host (Red Hat package) - update to 4.5.2-1.el8ev
OpenShift Virtualization - addressed in versions 4.8.7, 4.9.6, 4.11.1
Dell Secure Connect Gateway - update to 5.14.00.10
OpenShift Logging - addressed in versions 5.3.11, 5.3.12, 5.4.5, 5.5.1
LANTIME Operating System Firmware (LTOS) - addressed in versions 6.24.034, 7.06.007
IBM Qradar SIEM - addressed in versions 7.4.3 Fix Pack 8, 7.5.0 Update Pack 4
IBM Security Verify Access - update to 10.0.5.0 FP001
cflinuxfs3 - update to 0.355.0
Cloud Pak for Security (CP4S) - update to 1.10.12.0
Cloud Pak for Network Automation - update to 2.6.5
VMware Tanzu Operations Manager - update to 3.0.5
rsync - update to 3.0.6-12.14
rsync-debugsource - addressed in versions 3.1.0-13.19.1, 3.1.3-3.9.1, 3.1.3-150000.4.13.1, 3.2.3-150400.3.3.1, 3.2.7-7.1
rsync-debuginfo - addressed in versions 3.1.0-13.19.1, 3.1.3-3.9.1, 3.1.3-150000.4.13.1, 3.2.3-150400.3.3.1, 3.2.7-7.1
rsync - addressed in versions 3.1.0-13.19.1, 3.1.3-3.9.1, 3.1.3-150000.4.13.1, 3.2.3-150400.3.3.1, 3.2.7-7.1
rsync (Ubuntu package) - addressed in versions 3.1.2-2.1ubuntu1.6, 3.1.3-8ubuntu0.5, 3.2.7-0ubuntu0.22.04.2, 3.2.7-0ubuntu0.22.10.1
rsync - addressed in versions 3.1.2-11, 3.1.3-14
rsync (Red Hat package) - addressed in versions 3.1.2-11.el7_9, 3.1.3-6.el8_1.2, 3.1.3-7.el8_2.2, 3.1.3-12.el8_4.2, 3.1.3-14.el8_6.3, 3.2.3-9.el9_0.2
rsync - update to 3.1.3-9
rsync-debuginfo - update to 3.1.3-9
rsync-debugsource - update to 3.1.3-9
rsync-help - update to 3.1.3-9
rsync-daemon - update to 3.1.3-14
rsync - update to 3.2.5
rsync - addressed in versions 3.2.5-1.fc35, 3.2.5-1.fc36
PowerStore T - update to 3.5.0.1-2083289
IBM Cloud Pak for Watson AIOps - update to 3.6.1
Dell EMC NetWorker vProxy - update to 4.3.0-36
Platform Automation Toolkit - addressed in versions 4.4.31, 5.0.24, 5.1.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.3
OpenShift Data Foundation (formerly OpenShift Container Storage) - update to 4.13.0
XtremIO X2 - update to 6.4.2-13
Dell EMC VxRail Appliance - addressed in versions 7.0.401, 8.0.000
IBM QRadar Network Packet Capture - addressed in versions 7.4.3 Fix Pack 6, 7.5.0 Update Package 3
RSA Authentication Manager - update to 8.7 Patch 2
IBM Robotic Process Automation - update to 21.0.5

• http://www.openwall.com/lists/oss-security/2022/08/02/1

• Arbitrary client-side file overwrite in Rsync
• SUSE update for rsync
• Slackware Linux update for rsync
• SUSE update for rsync
• SUSE update for rsync
• Red Hat Enterprise Linux 9 update for rsync
• Red Hat Enterprise Linux 8 update for rsync
• Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions update for rsync
• Red Hat Enterprise Linux 8.2 Extended Update Support update for rsync
• Red Hat Enterprise Linux 8.4 Extended Update Support update for rsync
• Red Hat Enterprise Linux 7 update for rsync
• SUSE update for rsync
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.3
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP)
• SUSE update for rsync
• CentOS 7 update for rsync
• Multiple vulnerabilities in Red Hat OpenShift Logging 5.4
• Multiple vulnerabilities in Multicluster Engine for Kubernetes
• Multiple vulnerabilities in Openshift Logging 5.3
• Multiple vulnerabilities in Openshift Logging 5.5
• Multiple vulnerabilities in Red Hat Advanced Cluster Management
• Multiple vulnerabilities in OpenShift Container Platform 3.11
• Multiple vulnerabilities in OpenShift Container Platform 4.11
• Multiple vulnerabilities in OpenShift Container Platform 4.10
• Multiple vulnerabilities in OpenShift Container Platform 4.6
• Multiple vulnerabilities in OpenShift Container Platform 4.6
• Multiple vulnerabilities in OpenShift Container Platform 4.9
• Multiple vulnerabilities in OpenShift Container Platform 4.9
• Multiple vulnerabilities in Multicluster Engine for Kubernetes
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in OpenShift Container Platform 4.7
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.5
• Multiple vulnerabilities in OpenShift Container Platform 4.8
• Multiple vulnerabilities in Red Hat Virtualization Host 4 for RHEL 8
• Multiple vulnerabilities in OpenShift Virtualization 4.9
• Multiple vulnerabilities in OpenShift Logging 5.3
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.4
• Multiple vulnerabilities in Red Hat Advanced Cluster Security for Kubernetes (RHACS)
• Multiple vulnerabilities in OpenShift Virtualization 4.8
• Multiple vulnerabilities in OpenShift sandboxed containers
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• Multiple vulnerabilities in Dell VxRail
• Multiple vulnerabilities in IBM QRadar Network Packet Capture
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell EMC Data Protection Central
• Multiple vulnerabilities in OpenShift Virtualization 4.11
• Multiple vulnerabilities in Dell NetWorker vProxy
• Multiple vulnerabilities in Dell VxRail Appliance components
• Multiple vulnerabilities in IBM QRadar SIEM
• Ubuntu update for rsync
• Multiple vulnerabilities in Cloud Foundry Foundation cflinuxfs3
• Multiple vulnerabilities in IBM Security Verify Access
• Multiple vulnerabilities in OpenShift Container Platform 4.13
• VMware Tanzu products update for rsync
• Multiple vulnerabilities in IBM Security Guardium
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.13
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in Dell PowerStore Family
• Multiple vulnerabilities in IBM Cloud Pak for Network Automation
• Path traversal in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• openEuler update for rsync
• Gentoo update for rsync
• Amazon Linux AMI update for rsync
• Fedora 35 update for rsync
• Fedora 36 update for rsync
• Multiple vulnerabilities in Dell XtremIO X2
• Anolis OS update for rsync
• Anolis OS update for rsync
• RSA Authentication Manager update for third-party components
• Meinberg LANTIME firmware update for third-party components (October 2022)
• SUSE update for rsync