CVE-2006-2083

Description

Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.

How to fix CVE-2006-2083

To remediate CVE-2006-2083, upgrade the affected package to a fixed version below.

• Debian/rsync—upgrade to 2.6.8-1 or later

Is CVE-2006-2083 being exploited?

Low — EPSS is 1.5%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 2.6.8-1

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2006-2083