[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXWhSaeYe9XGQcryNC23Yn809WtO2qg_Hv2AD4C9_8Wk":3,"g5a-risk:CVE-2017-16548":180},{"success":4,"data":5,"meta":178},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":73,"references":74,"referencesCount":110,"weaknesses":111,"weaknessesCount":120,"isActivelyExploited":121,"cisaInfo":27,"otxData":27,"relatedBlogPosts":122,"seoMetadata":123,"configurations":148,"relatedVendorCves":176,"notableEvents":177},"CVE-2017-16548","What is CVE-2017-16548?","The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\\0' character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon.","The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\\0' character in an xattr name, which allows remot...","2017-11-06T05:29:00.253","2025-04-20T01:37:25.86",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.05775,[39,39,39,39,39,39,39],"Critical",[43,48,53,56,59,62,67,70],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"samba","rsync","*","cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":49,"product":50,"version":60,"criteria":61,"vulnerable":4},"17.10","cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":65,"criteria":66,"vulnerable":4},"debian","debian_linux","7.0","cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":68,"criteria":69,"vulnerable":4},"8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":63,"product":64,"version":71,"criteria":72,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",8,[75,80,83,88,92,95,98,100,102,104,106,108],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fbugzilla.samba.org\u002Fshow_bug.cgi?id=13112","Samba",[79],"Issue Tracking",{"url":81,"source":77,"tags":82},"https:\u002F\u002Fgit.samba.org\u002Frsync.git\u002F?p=rsync.git%3Ba=commit%3Bh=47a63d90e71d3e19e0e96052bb8c6b9cb140ecc1",[],{"url":84,"source":85,"tags":86},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2017\u002F12\u002Fmsg00020.html","Debian",[87],"Third Party Advisory",{"url":89,"source":90,"tags":91},"https:\u002F\u002Fusn.ubuntu.com\u002F3543-1\u002F","Ubuntu",[87],{"url":93,"source":90,"tags":94},"https:\u002F\u002Fusn.ubuntu.com\u002F3543-2\u002F",[87],{"url":96,"source":85,"tags":97},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-4068",[87],{"url":76,"source":77,"tags":99},[79],{"url":81,"source":77,"tags":101},[],{"url":84,"source":85,"tags":103},[87],{"url":89,"source":90,"tags":105},[87],{"url":93,"source":90,"tags":107},[87],{"url":96,"source":85,"tags":109},[87],12,[112],{"id":113,"name":114,"description":115,"extendedDescription":116,"status":117,"abstraction":118,"structure":119},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",1,false,[],{"title":124,"metaDescription":125,"keywords":126,"canonicalUrl":127,"structuredData":128},"What is CVE-2017-16548? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-16548, a critical severity cyber security vulnerability from 2017. The receive_xattr function in xattrs.c in rsync 3.1.2 a...","CVE-2017-16548, CVE-2017-16548 vulnerability, CVE-2017-16548 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, samba security, canonical security, debian security, rsync vulnerability, ubuntu_linux vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-16548",{"@context":129,"@type":130,"headline":124,"description":125,"datePublished":10,"dateModified":11,"author":131,"publisher":135,"about":139,"mainEntityOfPage":143,"articleSection":146,"keywords":147},"https:\u002F\u002Fschema.org","TechArticle",{"@type":132,"name":133,"url":134},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":132,"name":133,"url":134,"logo":136},{"@type":137,"url":138},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":140,"name":6,"description":141,"additionalType":142},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":144,"@id":145},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-16548","Cybersecurity","CVE-2017-16548, CVE-2017-16548 vulnerability, CVE-2017-16548 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[149,158],{"Operator":27,"Negate":27,"Nodes":150},[151],{"Operator":152,"Negate":27,"CPEMatch":153},"OR",[154],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":155,"VersionStartExcluding":156,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":157},"2C851A23-4E75-4796-9DC4-9897E4A433E6","2.6.9","3.1.2",{"Operator":27,"Negate":27,"Nodes":159},[160],{"Operator":152,"Negate":27,"CPEMatch":161},[162,164,166,168,170,172,174],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8D305F7A-D159-4716-AB26-5E38BB5CD991",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":167,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":169,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9070C9D8-A14A-467F-8253-33B966C16886",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":171,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"16F59A04-14CF-49E2-9973-645477EA09DA",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":173,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":175,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":179,"version":33},1792358806532,{"score":181,"band":182,"action":183,"scoredAt":184},55,"Medium","Plan remediation","2026-10-17T09:12:46.321802+00:00"]