CVE-2024-12747: Red Hat Discovery 1.14

Medium severity, CVSS 5.6. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when encountering symbolic links is to skip them. If an attacker replaced a regular file with a symbolic link at the right time, it was possible to bypass the default behavior and traverse symbolic links. Depending on the privileges of the rsync process, an attacker could leak sensitive information, potentially leading to privilege escalation.

Affected products

• Red Hat Red Hat Discovery 1.14: before 1.14.2-1748467619 (fixed in 1.14.2-1748467619)
• Red Hat Red Hat Enterprise Linux 10: before 0:3.4.1-2.el10 (fixed in 0:3.4.1-2.el10)
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8: before 0:3.1.3-21.el8_10 (fixed in 0:3.1.3-21.el8_10)
• Red Hat Red Hat Enterprise Linux 9: before 0:3.2.5-3.el9 (fixed in 0:3.2.5-3.el9)
• Red Hat Red Hat Openshift Container Platform 4

Published 2025-01-14. Last modified 2026-06-30.