[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8q-daLtr8wDvnZmzRn6Go4H5NacNGo_FVUoyZJRA-3o":3,"g5a-risk:CVE-2017-17434":140},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":56,"references":57,"referencesCount":37,"weaknesses":87,"weaknessesCount":91,"isActivelyExploited":92,"cisaInfo":15,"otxData":15,"relatedBlogPosts":93,"seoMetadata":94,"configurations":119,"relatedVendorCves":136,"notableEvents":137},"CVE-2017-17434","What is CVE-2017-17434?","The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data structure (in the recv_files function in receiver.c) and also does not apply the sanitize_paths protection mechanism to pathnames found in \"xname follows\" strings (in the read_ndx_and_attrs function in rsync.c), which allows remote attackers to bypass intended access restrictions.","The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data structure (in the re...","2017-12-06T03:29:00.267","2025-04-20T01:37:25.86",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.03271,[39,39,39,39,39,39,39],"Critical",[43,48,53],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"samba","rsync","*","cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",3,[58,63,67,70,74,77,79,81,83,85],{"url":59,"source":60,"tags":61},"http:\u002F\u002Fsecurity.cucumberlinux.com\u002Fsecurity\u002Fdetails.php?id=170","Cucumberlinux",[62],"Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgit.samba.org\u002F?p=rsync.git%3Ba=commit%3Bh=5509597decdbd7b91994210f700329d8a35e70a1","Samba",[],{"url":68,"source":65,"tags":69},"https:\u002F\u002Fgit.samba.org\u002F?p=rsync.git%3Ba=commit%3Bh=70aeb5fddd1b2f8e143276f8d5a085db16c593b9",[],{"url":71,"source":72,"tags":73},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2017\u002F12\u002Fmsg00020.html","Debian",[],{"url":75,"source":72,"tags":76},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-4068",[62],{"url":59,"source":60,"tags":78},[62],{"url":64,"source":65,"tags":80},[],{"url":68,"source":65,"tags":82},[],{"url":71,"source":72,"tags":84},[],{"url":75,"source":72,"tags":86},[62],[88],{"id":89,"name":89,"description":90},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":95,"metaDescription":96,"keywords":97,"canonicalUrl":98,"structuredData":99},"What is CVE-2017-17434? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-17434, a critical severity cyber security vulnerability from 2017. The daemon in rsync 3.1.2, and 3.1.3-development before...","CVE-2017-17434, CVE-2017-17434 vulnerability, CVE-2017-17434 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, samba security, debian security, rsync vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-17434",{"@context":100,"@type":101,"headline":95,"description":96,"datePublished":10,"dateModified":11,"author":102,"publisher":106,"about":110,"mainEntityOfPage":114,"articleSection":117,"keywords":118},"https:\u002F\u002Fschema.org","TechArticle",{"@type":103,"name":104,"url":105},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":103,"name":104,"url":105,"logo":107},{"@type":108,"url":109},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":111,"name":6,"description":112,"additionalType":113},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":115,"@id":116},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-17434","Cybersecurity","CVE-2017-17434, CVE-2017-17434 vulnerability, CVE-2017-17434 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[120,128],{"Operator":15,"Negate":15,"Nodes":121},[122],{"Operator":123,"Negate":15,"CPEMatch":124},"OR",[125],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":127},"F490A8DC-BDAF-4AD0-95E3-F98D5BDA75B9","3.1.2",{"Operator":15,"Negate":15,"Nodes":129},[130],{"Operator":123,"Negate":15,"CPEMatch":131},[132,134],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":133,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":135,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":139,"version":33},1792347344407,{"score":141,"band":142,"action":143,"scoredAt":144},55,"Medium","Plan remediation","2026-10-16T06:42:59.487594+00:00"]