Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-f6ja-7k85-j7aa
Summary
Multiple vulnerabilities have been found in rsync, the worst of
    which could allow remote attackers to write arbitrary files.
Aliases
0
alias CVE-2014-9512
Fixed_packages
0
url pkg:deb/debian/rsync@3.1.1-3?distro=trixie
purl pkg:deb/debian/rsync@3.1.1-3?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.1-3%3Fdistro=trixie
1
url pkg:deb/debian/rsync@3.1.1-3
purl pkg:deb/debian/rsync@3.1.1-3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-472y-7aza-j7c4
3
vulnerability VCID-4g8w-n139-dfbn
4
vulnerability VCID-78yq-gu4t-rke9
5
vulnerability VCID-9d7g-bby6-8fb3
6
vulnerability VCID-c1ec-hvuv-ckgk
7
vulnerability VCID-eyjp-7kks-jbfr
8
vulnerability VCID-h2jt-8ppk-nbh9
9
vulnerability VCID-m6xx-a91r-sbhu
10
vulnerability VCID-mr6h-6jrp-gyf3
11
vulnerability VCID-q576-uw5g-8kh3
12
vulnerability VCID-smft-ms93-6kf1
13
vulnerability VCID-y5ep-xtwr-ckg6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.1.1-3
2
url pkg:deb/debian/rsync@3.2.3-4%2Bdeb11u1?distro=trixie
purl pkg:deb/debian/rsync@3.2.3-4%2Bdeb11u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4g3g-qmrg-tbf6
1
vulnerability VCID-ua8q-v9qd-wqb5
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.3-4%252Bdeb11u1%3Fdistro=trixie
3
url pkg:deb/debian/rsync@3.2.7-1%2Bdeb12u4?distro=trixie
purl pkg:deb/debian/rsync@3.2.7-1%2Bdeb12u4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.2.7-1%252Bdeb12u4%3Fdistro=trixie
4
url pkg:deb/debian/rsync@3.4.1%2Bds1-5%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/rsync@3.4.1%2Bds1-5%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.4.1%252Bds1-5%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/rsync@3.4.1%2Bds1-7?distro=trixie
purl pkg:deb/debian/rsync@3.4.1%2Bds1-7?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.4.1%252Bds1-7%3Fdistro=trixie
6
url pkg:ebuild/net-misc/rsync@3.1.2
purl pkg:ebuild/net-misc/rsync@3.1.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/net-misc/rsync@3.1.2
Affected_packages
0
url pkg:deb/debian/rsync@1.6.9-1
purl pkg:deb/debian/rsync@1.6.9-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-2phq-g3rz-2be8
3
vulnerability VCID-472y-7aza-j7c4
4
vulnerability VCID-4g8w-n139-dfbn
5
vulnerability VCID-66n1-gnxa-2uf3
6
vulnerability VCID-78yq-gu4t-rke9
7
vulnerability VCID-9d7g-bby6-8fb3
8
vulnerability VCID-c1ec-hvuv-ckgk
9
vulnerability VCID-c8h5-wzqz-e3c6
10
vulnerability VCID-eyjp-7kks-jbfr
11
vulnerability VCID-f6ja-7k85-j7aa
12
vulnerability VCID-f9da-9x6z-kqcv
13
vulnerability VCID-h2jt-8ppk-nbh9
14
vulnerability VCID-m6xx-a91r-sbhu
15
vulnerability VCID-mr6h-6jrp-gyf3
16
vulnerability VCID-pfb2-95fp-7bbm
17
vulnerability VCID-q576-uw5g-8kh3
18
vulnerability VCID-qwud-4v7w-43dv
19
vulnerability VCID-rp3f-utn4-ubb7
20
vulnerability VCID-smft-ms93-6kf1
21
vulnerability VCID-su3r-5r3f-fbfr
22
vulnerability VCID-ty4c-hwkm-uqes
23
vulnerability VCID-y5ep-xtwr-ckg6
24
vulnerability VCID-yd1c-ptsv-hffu
25
vulnerability VCID-zr3m-d432-vqge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@1.6.9-1
1
url pkg:deb/debian/rsync@2.3.1-0.slink.1
purl pkg:deb/debian/rsync@2.3.1-0.slink.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-2phq-g3rz-2be8
3
vulnerability VCID-472y-7aza-j7c4
4
vulnerability VCID-4g8w-n139-dfbn
5
vulnerability VCID-66n1-gnxa-2uf3
6
vulnerability VCID-78yq-gu4t-rke9
7
vulnerability VCID-9d7g-bby6-8fb3
8
vulnerability VCID-c1ec-hvuv-ckgk
9
vulnerability VCID-c8h5-wzqz-e3c6
10
vulnerability VCID-eyjp-7kks-jbfr
11
vulnerability VCID-f6ja-7k85-j7aa
12
vulnerability VCID-f9da-9x6z-kqcv
13
vulnerability VCID-h2jt-8ppk-nbh9
14
vulnerability VCID-m6xx-a91r-sbhu
15
vulnerability VCID-mr6h-6jrp-gyf3
16
vulnerability VCID-pfb2-95fp-7bbm
17
vulnerability VCID-q576-uw5g-8kh3
18
vulnerability VCID-qwud-4v7w-43dv
19
vulnerability VCID-rp3f-utn4-ubb7
20
vulnerability VCID-smft-ms93-6kf1
21
vulnerability VCID-su3r-5r3f-fbfr
22
vulnerability VCID-ty4c-hwkm-uqes
23
vulnerability VCID-y5ep-xtwr-ckg6
24
vulnerability VCID-yd1c-ptsv-hffu
25
vulnerability VCID-zr3m-d432-vqge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@2.3.1-0.slink.1
2
url pkg:deb/debian/rsync@2.3.2-1.2
purl pkg:deb/debian/rsync@2.3.2-1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-2phq-g3rz-2be8
3
vulnerability VCID-472y-7aza-j7c4
4
vulnerability VCID-4g8w-n139-dfbn
5
vulnerability VCID-66n1-gnxa-2uf3
6
vulnerability VCID-78yq-gu4t-rke9
7
vulnerability VCID-9d7g-bby6-8fb3
8
vulnerability VCID-c1ec-hvuv-ckgk
9
vulnerability VCID-c8h5-wzqz-e3c6
10
vulnerability VCID-eyjp-7kks-jbfr
11
vulnerability VCID-f6ja-7k85-j7aa
12
vulnerability VCID-f9da-9x6z-kqcv
13
vulnerability VCID-h2jt-8ppk-nbh9
14
vulnerability VCID-m6xx-a91r-sbhu
15
vulnerability VCID-mr6h-6jrp-gyf3
16
vulnerability VCID-pfb2-95fp-7bbm
17
vulnerability VCID-q576-uw5g-8kh3
18
vulnerability VCID-qwud-4v7w-43dv
19
vulnerability VCID-rp3f-utn4-ubb7
20
vulnerability VCID-smft-ms93-6kf1
21
vulnerability VCID-su3r-5r3f-fbfr
22
vulnerability VCID-ty4c-hwkm-uqes
23
vulnerability VCID-y5ep-xtwr-ckg6
24
vulnerability VCID-yd1c-ptsv-hffu
25
vulnerability VCID-zr3m-d432-vqge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@2.3.2-1.2
3
url pkg:deb/debian/rsync@2.5.5-0.6
purl pkg:deb/debian/rsync@2.5.5-0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-2phq-g3rz-2be8
3
vulnerability VCID-472y-7aza-j7c4
4
vulnerability VCID-4g8w-n139-dfbn
5
vulnerability VCID-66n1-gnxa-2uf3
6
vulnerability VCID-78yq-gu4t-rke9
7
vulnerability VCID-9d7g-bby6-8fb3
8
vulnerability VCID-c1ec-hvuv-ckgk
9
vulnerability VCID-c8h5-wzqz-e3c6
10
vulnerability VCID-eyjp-7kks-jbfr
11
vulnerability VCID-f6ja-7k85-j7aa
12
vulnerability VCID-f9da-9x6z-kqcv
13
vulnerability VCID-h2jt-8ppk-nbh9
14
vulnerability VCID-m6xx-a91r-sbhu
15
vulnerability VCID-mr6h-6jrp-gyf3
16
vulnerability VCID-pfb2-95fp-7bbm
17
vulnerability VCID-q576-uw5g-8kh3
18
vulnerability VCID-qwud-4v7w-43dv
19
vulnerability VCID-rp3f-utn4-ubb7
20
vulnerability VCID-smft-ms93-6kf1
21
vulnerability VCID-su3r-5r3f-fbfr
22
vulnerability VCID-ty4c-hwkm-uqes
23
vulnerability VCID-y5ep-xtwr-ckg6
24
vulnerability VCID-yd1c-ptsv-hffu
25
vulnerability VCID-zr3m-d432-vqge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@2.5.5-0.6
4
url pkg:deb/debian/rsync@2.6.4-6
purl pkg:deb/debian/rsync@2.6.4-6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-2phq-g3rz-2be8
3
vulnerability VCID-472y-7aza-j7c4
4
vulnerability VCID-4g8w-n139-dfbn
5
vulnerability VCID-66n1-gnxa-2uf3
6
vulnerability VCID-78yq-gu4t-rke9
7
vulnerability VCID-9d7g-bby6-8fb3
8
vulnerability VCID-c1ec-hvuv-ckgk
9
vulnerability VCID-eyjp-7kks-jbfr
10
vulnerability VCID-f6ja-7k85-j7aa
11
vulnerability VCID-f9da-9x6z-kqcv
12
vulnerability VCID-h2jt-8ppk-nbh9
13
vulnerability VCID-m6xx-a91r-sbhu
14
vulnerability VCID-mr6h-6jrp-gyf3
15
vulnerability VCID-pfb2-95fp-7bbm
16
vulnerability VCID-q576-uw5g-8kh3
17
vulnerability VCID-qwud-4v7w-43dv
18
vulnerability VCID-smft-ms93-6kf1
19
vulnerability VCID-y5ep-xtwr-ckg6
20
vulnerability VCID-yd1c-ptsv-hffu
21
vulnerability VCID-zr3m-d432-vqge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@2.6.4-6
5
url pkg:deb/debian/rsync@2.6.9-2
purl pkg:deb/debian/rsync@2.6.9-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-2phq-g3rz-2be8
3
vulnerability VCID-472y-7aza-j7c4
4
vulnerability VCID-4g8w-n139-dfbn
5
vulnerability VCID-66n1-gnxa-2uf3
6
vulnerability VCID-78yq-gu4t-rke9
7
vulnerability VCID-9d7g-bby6-8fb3
8
vulnerability VCID-c1ec-hvuv-ckgk
9
vulnerability VCID-eyjp-7kks-jbfr
10
vulnerability VCID-f6ja-7k85-j7aa
11
vulnerability VCID-f9da-9x6z-kqcv
12
vulnerability VCID-h2jt-8ppk-nbh9
13
vulnerability VCID-m6xx-a91r-sbhu
14
vulnerability VCID-mr6h-6jrp-gyf3
15
vulnerability VCID-q576-uw5g-8kh3
16
vulnerability VCID-qwud-4v7w-43dv
17
vulnerability VCID-smft-ms93-6kf1
18
vulnerability VCID-y5ep-xtwr-ckg6
19
vulnerability VCID-yd1c-ptsv-hffu
20
vulnerability VCID-zr3m-d432-vqge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@2.6.9-2
6
url pkg:deb/debian/rsync@2.6.9-2etch2
purl pkg:deb/debian/rsync@2.6.9-2etch2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-2phq-g3rz-2be8
3
vulnerability VCID-472y-7aza-j7c4
4
vulnerability VCID-4g8w-n139-dfbn
5
vulnerability VCID-66n1-gnxa-2uf3
6
vulnerability VCID-78yq-gu4t-rke9
7
vulnerability VCID-9d7g-bby6-8fb3
8
vulnerability VCID-c1ec-hvuv-ckgk
9
vulnerability VCID-eyjp-7kks-jbfr
10
vulnerability VCID-f6ja-7k85-j7aa
11
vulnerability VCID-f9da-9x6z-kqcv
12
vulnerability VCID-h2jt-8ppk-nbh9
13
vulnerability VCID-m6xx-a91r-sbhu
14
vulnerability VCID-mr6h-6jrp-gyf3
15
vulnerability VCID-q576-uw5g-8kh3
16
vulnerability VCID-qwud-4v7w-43dv
17
vulnerability VCID-smft-ms93-6kf1
18
vulnerability VCID-y5ep-xtwr-ckg6
19
vulnerability VCID-yd1c-ptsv-hffu
20
vulnerability VCID-zr3m-d432-vqge
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@2.6.9-2etch2
7
url pkg:deb/debian/rsync@3.0.3-2
purl pkg:deb/debian/rsync@3.0.3-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-472y-7aza-j7c4
3
vulnerability VCID-4g8w-n139-dfbn
4
vulnerability VCID-66n1-gnxa-2uf3
5
vulnerability VCID-78yq-gu4t-rke9
6
vulnerability VCID-9d7g-bby6-8fb3
7
vulnerability VCID-c1ec-hvuv-ckgk
8
vulnerability VCID-eyjp-7kks-jbfr
9
vulnerability VCID-f6ja-7k85-j7aa
10
vulnerability VCID-h2jt-8ppk-nbh9
11
vulnerability VCID-m6xx-a91r-sbhu
12
vulnerability VCID-mr6h-6jrp-gyf3
13
vulnerability VCID-q576-uw5g-8kh3
14
vulnerability VCID-qwud-4v7w-43dv
15
vulnerability VCID-smft-ms93-6kf1
16
vulnerability VCID-y5ep-xtwr-ckg6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.0.3-2
8
url pkg:deb/debian/rsync@3.0.7-2
purl pkg:deb/debian/rsync@3.0.7-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-472y-7aza-j7c4
3
vulnerability VCID-4g8w-n139-dfbn
4
vulnerability VCID-66n1-gnxa-2uf3
5
vulnerability VCID-78yq-gu4t-rke9
6
vulnerability VCID-9d7g-bby6-8fb3
7
vulnerability VCID-c1ec-hvuv-ckgk
8
vulnerability VCID-eyjp-7kks-jbfr
9
vulnerability VCID-f6ja-7k85-j7aa
10
vulnerability VCID-h2jt-8ppk-nbh9
11
vulnerability VCID-m6xx-a91r-sbhu
12
vulnerability VCID-mr6h-6jrp-gyf3
13
vulnerability VCID-q576-uw5g-8kh3
14
vulnerability VCID-qwud-4v7w-43dv
15
vulnerability VCID-smft-ms93-6kf1
16
vulnerability VCID-y5ep-xtwr-ckg6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.0.7-2
9
url pkg:deb/debian/rsync@3.0.9-4
purl pkg:deb/debian/rsync@3.0.9-4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1dp2-jcqh-7ket
1
vulnerability VCID-1snq-bkw3-3kff
2
vulnerability VCID-472y-7aza-j7c4
3
vulnerability VCID-4g8w-n139-dfbn
4
vulnerability VCID-66n1-gnxa-2uf3
5
vulnerability VCID-78yq-gu4t-rke9
6
vulnerability VCID-9d7g-bby6-8fb3
7
vulnerability VCID-c1ec-hvuv-ckgk
8
vulnerability VCID-eyjp-7kks-jbfr
9
vulnerability VCID-f6ja-7k85-j7aa
10
vulnerability VCID-h2jt-8ppk-nbh9
11
vulnerability VCID-m6xx-a91r-sbhu
12
vulnerability VCID-mr6h-6jrp-gyf3
13
vulnerability VCID-q576-uw5g-8kh3
14
vulnerability VCID-smft-ms93-6kf1
15
vulnerability VCID-y5ep-xtwr-ckg6
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/rsync@3.0.9-4
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9512.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9512.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9512
reference_id
reference_type
scores
0
value 0.08882
scoring_system epss
scoring_elements 0.92571
published_at 2026-04-18T12:55:00Z
1
value 0.08882
scoring_system epss
scoring_elements 0.92523
published_at 2026-04-01T12:55:00Z
2
value 0.08882
scoring_system epss
scoring_elements 0.92528
published_at 2026-04-02T12:55:00Z
3
value 0.08882
scoring_system epss
scoring_elements 0.92536
published_at 2026-04-04T12:55:00Z
4
value 0.08882
scoring_system epss
scoring_elements 0.92538
published_at 2026-04-07T12:55:00Z
5
value 0.08882
scoring_system epss
scoring_elements 0.92549
published_at 2026-04-08T12:55:00Z
6
value 0.08882
scoring_system epss
scoring_elements 0.92554
published_at 2026-04-09T12:55:00Z
7
value 0.08882
scoring_system epss
scoring_elements 0.9256
published_at 2026-04-13T12:55:00Z
8
value 0.08882
scoring_system epss
scoring_elements 0.92561
published_at 2026-04-12T12:55:00Z
9
value 0.08882
scoring_system epss
scoring_elements 0.92572
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9512
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9512
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9512
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:N/C:N/I:C/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1293854
reference_id 1293854
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1293854
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778333
reference_id 778333
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=778333
6
reference_url https://security.gentoo.org/glsa/201605-04
reference_id GLSA-201605-04
reference_type
scores
url https://security.gentoo.org/glsa/201605-04
7
reference_url https://usn.ubuntu.com/2879-1/
reference_id USN-2879-1
reference_type
scores
url https://usn.ubuntu.com/2879-1/
Weaknesses
0
cwe_id 22
name Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Exploits
Severity_range_score6.1 - 6.1
Exploitability0.5
Weighted_severity3.0
Risk_score1.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-f6ja-7k85-j7aa