Denial of Service Vulnerability in rsync Affects Samba and Various Linux Distributions
CVE-2014-2855
Currently unrated
Key Information:
What is CVE-2014-2855?
The check_secret function in the authenticate.c file of rsync versions up to 3.1.0 can be exploited by remote attackers to induce a denial of service condition. This occurs when a non-existent username is processed, leading to an infinite loop and excessive CPU resource consumption. As a result, legitimate users may experience disruptions in service availability, highlighting the importance of updating the software to mitigate such risks.