CVE-2024-12085 json
Rsync: info leak via uninitialized stack contents
published last yr. modified 5d ago also EUVD-2024-50581 , JLSEC-2025-324
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 8.6%
- EPSS 8.6% chance of exploitation in 30 days, percentile 95%
- public exploits
- 0
- none known
Summary
A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.
Patch / fix
- julia rsync_jll 3.3.0+0
- Red Hat Red Hat Enterprise Linux 10 0:3.4.1-2.el10
- Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION 0:3.0.6-12.el6_10.1
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:3.1.2-12.el7_9.1
- Red Hat Red Hat Enterprise Linux 8 0:3.1.3-20.el8_10
- Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support 0:3.1.3-7.el8_2.3
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:3.1.3-12.el8_4.3
- Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service 0:3.1.3-12.el8_4.3
- Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions 0:3.1.3-12.el8_4.3
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:3.1.3-14.el8_6.6
- Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service 0:3.1.3-14.el8_6.6
- Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 0:3.1.3-14.el8_6.6
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support 0:3.1.3-20.el8_8.1
- Red Hat Red Hat Enterprise Linux 9 0:3.2.3-20.el9_5.1
- Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions 0:3.2.3-9.el9_0.3
- Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support 0:3.2.3-19.el9_2.1
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support 0:3.2.3-19.el9_4.1
- Red Hat Red Hat OpenShift Container Platform 4.12 412.86.202502100314-0
- Red Hat Red Hat OpenShift Container Platform 4.13 413.92.202503112237-0
- Red Hat Red Hat OpenShift Container Platform 4.14 414.92.202502111902-0
- Red Hat Red Hat OpenShift Container Platform 4.15 415.92.202501281917-0
- Red Hat Red Hat OpenShift Container Platform 4.16 v4.16.0-202501311605.p0.g4246d04.assembly.stream.el9, v4.16.0-202501311735.p0.g2cb0020.assembly.stream.el9, v4.16.0-202501311933.p0.g4246d04.assembly.stream.el9
- Red Hat Red Hat OpenShift Container Platform 4.17 417.94.202502051822-0
- Red Hat Red Hat OpenShift Container Platform 4.18 v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9, v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9, v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9, v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9, v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9, v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9, v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9, v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9, v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9, v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9, v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9, v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9, v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9, v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9, v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9, v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9, v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9, v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9, v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9, v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9
- Red Hat RHOL-5.8-RHEL-9 v0.1.0-342, v0.1.0-725, v0.4.0-339, v0.28.1-88, v1.0.0-537, v1.1.0-320, v3.3.2-9, v5.8.1-552, v5.8.17-4, v5.8.17-5, v5.8.17-10, v5.8.17-12, v5.8.17-17, v5.8.17-22, v6.8.1-454
- Red Hat RHOL-5.9-RHEL-9 v0.1.0-341, v0.1.0-724, v0.4.0-340, v0.34.1-30, v1.1.0-321, v3.3.2-8, v5.9.11-4, v5.9.11-5, v5.9.11-6, v5.9.11-9, v5.9.11-11, v5.9.11-25
- Red Hat OpenShift Compliance Operator 1 1.8.0
- rsync Debian 12 3.2.7-1+deb12u1
- rsync Debian 14, Debian 13 3.3.0+ds1-3
debian advisories DEBIAN-CVE-2024-12085
- rsync Ubuntu 20.04 LTS 3.1.3-8ubuntu0.8
- rsync Ubuntu 22.04 LTS 3.2.7-0ubuntu0.22.04.3
- rsync Ubuntu 24.04 LTS 3.2.7-1ubuntu1.1
- rsync Ubuntu Pro 14.04 LTS 3.1.0-2ubuntu0.4+esm1
- rsync Ubuntu Pro 16.04 LTS 3.1.1-3ubuntu1.3+esm3
- rsync Ubuntu Pro 18.04 LTS 3.1.2-2.1ubuntu1.6+esm1
ubuntu advisories UBUNTU-CVE-2024-12085
Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- rsync RHEL 10.0 3.4.1-2.el10
- rsync-daemon RHEL 10.0 3.4.1-2.el10
- rsync-rrsync RHEL 10.0 3.4.1-2.el10
- rsync RHEL 9 3.2.3-20.el9_5.1
- rsync-daemon RHEL 9 3.2.3-20.el9_5.1
- rsync RHEL 8 3.1.3-20.el8_10
- rsync-daemon RHEL 8 3.1.3-20.el8_10
- rsync RHEL 8.4 TUS, RHEL 8.4 E4S, RHEL 8.4 AUS 3.1.3-12.el8_4.3
red hat advisories RHBA-2025:6470RHSA-2025:0885RHSA-2025:0884RHSA-2025:0849RHSA-2025:0790RHSA-2025:0787
- rsync Linux Micro 6.1 3.3.0-slfo.1.1_3.1
- rsync Linux Micro 6.0 3.2.7-4.1
- rsync SLES for SAP 15 SP5, SLES for SAP 15 SP4, SLES 15 SP5-LTSS +10 more 3.2.3-150400.3.17.1
- rsync SLES for SAP 15 SP3, SLES 15 SP3-LTSS, SLE Micro 5.2 +3 more 3.2.3-150000.4.33.1
- rsync SLE Module for Basesystem 15 SP6, openSUSE Leap 15.6 3.2.7-150600.3.8.1
- rsync SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 3.1.3-3.22.1
suse advisories SUSE-SU-2025:20223-1SUSE-SU-2025:20122-1SUSE-SU-2025:0166-1SUSE-SU-2025:0165-1SUSE-SU-2025:0157-1SUSE-SU-2025:0156-1
- rsync openSUSE Tumbleweed 3.4.1-1.1
opensuse advisories openSUSE-SU-2025:14665-1
- rsync AlmaLinux 9 3.2.3-20.el9_5.1
- rsync-daemon AlmaLinux 9 3.2.3-20.el9_5.1
- rsync AlmaLinux 8 3.1.3-20.el8_10
- rsync-daemon AlmaLinux 8 3.1.3-20.el8_10
almalinux advisories ALSA-2025:0324ALSA-2025:0325
- rsync Rocky Linux 9 3.2.3-20.el9_5.1
- rsync Rocky Linux 8 3.1.3-20.el8_10
rocky linux advisories RLSA-2025:0324RLSA-2025:0325
- rsync Alpine 3.24, Alpine 3.23, Alpine 3.22 +4 more 3.4.0-r0
alpine advisories ALPINE-CVE-2024-12085
Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0
- rsync CBL-Mariner 2.0, Azure Linux 3.0 3.4.1-1
azure linux advisories AZL-55649AZL-55664
Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT
- rsync Arch Linux 3.4.0-1
arch linux advisories AVG-2858
Is CVE-2024-12085 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerVendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2024-12085 updated cvss 7.5
rsync: Info Leak via Uninitialized Stack Contents
-
Red Hat OpenShift Compliance Operator 1 compliancefixed: vendor fix RHSA-2025:21885
-
Red Hat Enterprise Linux AppStream (v. 9) rsync-daemon 3.2.3-20.el9_5.1fixed: vendor fix RHSA-2025:0324
-
Red Hat Enterprise Linux AppStream (v. 10) rsync-daemon 3.4.1-2.el10, rsync-rrsync 3.4.1-2.el10fixed: vendor fix RHBA-2025:6470
-
Red Hat Enterprise Linux AppStream E4S (v.9.0) rsync-daemon 3.2.3-9.el9_0.3fixed: vendor fix RHSA-2025:0688
-
Red Hat Enterprise Linux AppStream EUS (v.9.2) rsync-daemon 3.2.3-19.el9_2.1fixed: vendor fix RHSA-2025:0774
-
Red Hat Enterprise Linux AppStream EUS (v.9.4) rsync-daemon 3.2.3-19.el9_4.1fixed: vendor fix RHSA-2025:0637
-
Red Hat Enterprise Linux BaseOS (v. 8) rsync 3.1.3-20.el8_10, rsync-daemon 3.1.3-20.el8_10fixed: vendor fix RHSA-2025:0325
-
Red Hat Enterprise Linux BaseOS (v. 9) rsync 3.2.3-20.el9_5.1fixed: vendor fix RHSA-2025:0324
show 24 moreshow fewer
-
Red Hat Enterprise Linux BaseOS (v. 10) rsync 3.4.1-2.el10fixed: vendor fix RHBA-2025:6470
-
Red Hat Enterprise Linux BaseOS AUS (v. 8.2) rsync 3.1.3-7.el8_2.3, rsync-daemon 3.1.3-7.el8_2.3fixed: vendor fix RHSA-2025:0884
-
Red Hat Enterprise Linux BaseOS AUS (v.8.4) rsync 3.1.3-12.el8_4.3, rsync-daemon 3.1.3-12.el8_4.3fixed: vendor fix RHSA-2025:0885
-
Red Hat Enterprise Linux BaseOS AUS (v.8.6) rsync 3.1.3-14.el8_6.6, rsync-daemon 3.1.3-14.el8_6.6fixed: vendor fix RHSA-2025:0790
-
Red Hat Enterprise Linux BaseOS E4S (v.8.4) rsync 3.1.3-12.el8_4.3, rsync-daemon 3.1.3-12.el8_4.3fixed: vendor fix RHSA-2025:0885
-
Red Hat Enterprise Linux BaseOS E4S (v.8.6) rsync 3.1.3-14.el8_6.6, rsync-daemon 3.1.3-14.el8_6.6fixed: vendor fix RHSA-2025:0790
-
Red Hat Enterprise Linux BaseOS E4S (v.9.0) rsync 3.2.3-9.el9_0.3fixed: vendor fix RHSA-2025:0688
-
Red Hat Enterprise Linux BaseOS EUS (v.8.8) rsync 3.1.3-20.el8_8.1, rsync-daemon 3.1.3-20.el8_8.1fixed: vendor fix RHSA-2025:0787
-
Red Hat Enterprise Linux BaseOS EUS (v.9.2) rsync 3.2.3-19.el9_2.1fixed: vendor fix RHSA-2025:0774
-
Red Hat Enterprise Linux BaseOS EUS (v.9.4) rsync 3.2.3-19.el9_4.1fixed: vendor fix RHSA-2025:0637
-
Red Hat Enterprise Linux BaseOS TUS (v.8.4) rsync 3.1.3-12.el8_4.3, rsync-daemon 3.1.3-12.el8_4.3fixed: vendor fix RHSA-2025:0885
-
Red Hat Enterprise Linux BaseOS TUS (v.8.6) rsync 3.1.3-14.el8_6.6, rsync-daemon 3.1.3-14.el8_6.6fixed: vendor fix RHSA-2025:0790
-
Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) rsync 3.0.6-12.el6_10.1fixed: vendor fix RHSA-2025:0849
-
Red Hat Enterprise Linux Server (v. 7 ELS) rsync 3.1.2-12.el7_9.1fixed: vendor fix RHSA-2025:0714
-
Red Hat OpenShift Container Platform 4.12 rhcos 412.86.202502100314-0fixed: vendor fix RHSA-2025:1242
-
Red Hat OpenShift Container Platform 4.13 rhcos 413.92.202503112237-0fixed: vendor fix RHSA-2025:2701
-
Red Hat OpenShift Container Platform 4.14 rhcos 414.92.202502111902-0fixed: vendor fix RHSA-2025:1451
-
Red Hat OpenShift Container Platform 4.15 rhcos 415.92.202501281917-0fixed: vendor fix RHSA-2025:1128
-
Red Hat OpenShift Container Platform 4.16 openshift4/ose-operator-sdk-rhel9 v4.16.0-202501311605.p0.g4246d04.assembly.stream.el9, openshift4/ose-helm-rhel9-operator v4.16.0-202501311933.p0.g4246d04.assembly.stream.el9, openshift4/ose-ansible-rhel9-operator v4.16.0-202501311735.p0.g2cb0020.assembly.stream.el9fixed: vendor fix RHSA-2025:1123
-
Red Hat OpenShift Container Platform 4.17 rhcos 417.94.202502051822-0fixed: vendor fix RHSA-2025:1120
-
Red Hat OpenShift Container Platform 4.18 rhcos 418.94.202502100215-0, openshift4/frr-rhel9 v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9, openshift4/ose-cli-rhel9 v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9, openshift4/ose-pod-rhel9 v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9, openshift4/ose-etcd-rhel9 v4.18.0-202501230001.p0.g914783c.assembly.stream.el9, openshift4/ose-tests-rhel9 v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9, +184 morefixed: vendor fix RHSA-2024:6122
-
Red Hat RHOL 5.8 for RHEL 9 openshift-logging/fluentd-rhel9 v5.8.17-4, openshift-logging/vector-rhel9 v0.28.1-88, openshift-logging/logging-loki-rhel9 v3.3.2-9, openshift-logging/eventrouter-rhel9 v0.4.0-339, openshift-logging/loki-rhel9-operator v5.8.17-5, openshift-logging/opa-openshift-rhel9 v0.1.0-342, +11 morefixed: vendor fix RHSA-2025:1225
-
Red Hat RHOL 5.9 for RHEL 9 openshift-logging/fluentd-rhel9 v5.9.11-5, openshift-logging/vector-rhel9 v0.34.1-30, openshift-logging/logging-loki-rhel9 v3.3.2-8, openshift-logging/eventrouter-rhel9 v0.4.0-340, openshift-logging/loki-rhel9-operator v5.9.11-4, openshift-logging/loki-operator-bundle v5.9.11-9, +6 morefixed: vendor fix RHSA-2025:1227
-
Red Hat OpenShift Compliance Operator 1 compliance Red Hat OpenShift Container Platform 4.12 openshift4/ose-cli v4.12.0-202501291059.p0.gd691257.assembly.stream.el8, openshift4/ose-pod v4.12.0-202501291059.p0.g1eb8682.assembly.stream.el8, openshift4/ose-etcd v4.12.0-202501291059.p0.gbb82e89.assembly.stream.el8, openshift4/ose-tests v4.12.0-202502100329.p0.gdaedb2e.assembly.stream.el8, openshift4/ose-console v4.12.0-202502100329.p0.g8910d84.assembly.stream.el8, openshift4/ose-coredns v4.12.0-202501291059.p0.gcc1194e.assembly.stream.el8, +172 more Red Hat OpenShift Container Platform 4.13 openshift4/ose-cli v4.13.0-202503111300.p0.gd192e90.assembly.stream.el8, openshift4/ose-pod v4.13.0-202503111300.p0.g53fd427.assembly.stream.el8, openshift4/ose-tests v4.13.0-202503111300.p0.g2471787.assembly.stream.el8, openshift4/ose-console v4.13.0-202503111300.p0.g6fd4a6d.assembly.stream.el8, openshift4/ose-coredns v4.13.0-202503111300.p0.ge70f097.assembly.stream.el8, openshift4/ose-deployer v4.13.0-202503112229.p0.gd192e90.assembly.stream.el8, +186 more Red Hat OpenShift Container Platform 4.14 openshift4/ose-cli v4.14.0-202502111935.p0.g44b3ac2.assembly.stream.el8, openshift4/ose-pod v4.14.0-202502111935.p0.g03a907c.assembly.stream.el8, openshift4/ose-tests v4.14.0-202502111935.p0.g2c640ec.assembly.stream.el8, openshift4/ose-console v4.14.0-202502111305.p0.ge25fc44.assembly.stream.el8, openshift4/ose-coredns v4.14.0-202502111935.p0.gfdd6037.assembly.stream.el8, openshift4/ose-deployer v4.14.0-202502111935.p0.g44b3ac2.assembly.stream.el8, +190 more Red Hat OpenShift Container Platform 4.15 openshift4/ose-cli v4.15.0-202501280037.p0.g8231637.assembly.stream.el8, openshift4/ose-tests v4.15.0-202501280037.p0.g1ec9664.assembly.stream.el8, openshift4/ose-console v4.15.0-202502031436.p0.g68767b8.assembly.stream.el8, openshift4/ose-deployer v4.15.0-202501280037.p0.g8231637.assembly.stream.el8, openshift4/ose-installer v4.15.0-202501280037.p0.gb097fc8.assembly.stream.el8, openshift4/ose-pod-rhel9 v4.15.0-202501281905.p0.gff493be.assembly.stream.el9, +182 more Red Hat OpenShift Container Platform 4.17 openshift4/frr-rhel9 v4.17.0-202502051233.p0.g377d02f.assembly.stream.el9, openshift4/ose-cli-rhel9 v4.17.0-202502051534.p0.g1b0bf08.assembly.stream.el9, openshift4/ose-tests-rhel9 v4.17.0-202502051534.p0.g73c6041.assembly.stream.el9, openshift4/ose-tools-rhel9 v4.17.0-202502051534.p0.g1b0bf08.assembly.stream.el9, openshift4/ose-ironic-rhel9 v4.17.0-202502051933.p0.g1473528.assembly.stream.el9, openshift4/ose-console-rhel9 v4.17.0-202502052104.p0.g6f7e5c9.assembly.stream.el9, +17 morenot affected: vulnerable code not present
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- yes
- Technical impact
- partial
- Assessed
- last yr.
Exploit prediction
8.64% chance of exploitation in the next 30 days, higher than 95% of all scored CVEs (FIRST EPSS, 2026-11-14).
Exploits and checks
- github.com https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| OSV | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| julia | rsync_jll | <3.3.0+0 |
3.3.0+0 |
Affected products
- RsyncProject rsync
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
- Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support
- Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
- Red Hat Red Hat Enterprise Linux 8.4 Telecommunications Update Service
- Red Hat Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
- Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
- Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service
- Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
- Red Hat Red Hat Enterprise Linux 8.8 Extended Update Support
- Red Hat Red Hat Enterprise Linux 9
- Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
- Red Hat Red Hat Enterprise Linux 9.2 Extended Update Support
- Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support
- Red Hat Red Hat OpenShift Container Platform 4.12
- Red Hat Red Hat OpenShift Container Platform 4.13
- Red Hat Red Hat OpenShift Container Platform 4.14
- Red Hat Red Hat OpenShift Container Platform 4.15
- Red Hat Red Hat OpenShift Container Platform 4.16
- Red Hat Red Hat OpenShift Container Platform 4.17
- Red Hat Red Hat OpenShift Container Platform 4.18
- Red Hat RHOL-5.8-RHEL-9
- Red Hat RHOL-5.9-RHEL-9
- Red Hat OpenShift Compliance Operator 1
Classification
- Weakness
-
- CWE-908 Use of Uninitialized Resource
References
-
github.com
/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj
exploit, third-party-advisory, web
-
access.redhat.com
/errata/RHBA-2025:6470
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2024:6122
vendor-advisory
-
access.redhat.com
/errata/RHSA-2025:0324
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0325
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0637
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0688
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0714
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0774
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0787
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0790
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0849
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0884
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:0885
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:1120
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:1123
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:1128
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:1225
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:1227
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:1242
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:1451
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/errata/RHSA-2025:21885
vendor-advisory, web
-
access.redhat.com
/errata/RHSA-2025:2701
vendor-advisory, third-party-advisory, web
-
access.redhat.com
/security/cve/CVE-2024-12085
vdb-entry, third-party-advisory, web
-
bugzilla.redhat.com
/show_bug.cgi?id=2330539
issue-tracking, third-party-advisory, web
-
kb.cert.org
/vuls/id/952657
third-party-advisory, web
-
security.netapp.com
/advisory/ntap-20250131-0002/
web
-
lists.debian.org
/debian-lts-announce/2025/01/msg00008.html
web
-
kb.cert.org
/vuls/id/952657
web
Sources
- CVE List CVE-2024-12085
- NVD CVE-2024-12085
- OSV JLSEC-2025-324
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.