Skip to content
Heist/ feed
Back to feed
High

Rsync: info leak via uninitialized stack contents

Type: advisorySources: OSV

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2024-12084, CVE-2024-12085, CVE-2024-12086, CVE-2024-12087, CVE-2024-12088
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 21:31 UTC · Revision 1

Source evidence

Rsync: info leak via uninitialized stack contents

core-osv · Original source

Published 14 Jan 2025, 17:37 UTC

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.

osv:CVE-2024-12085
Complete source record
{
  "id": "00654516facd88bf0b3a40f0fa6aba4a02dd8a4fd4cd4e09014aded84149695e",
  "url": "https://osv.dev/vulnerability/CVE-2024-12085",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Rsync: info leak via uninitialized stack contents",
    "summary": "A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time.",
    "evidence": "osv:CVE-2024-12085",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2024-12085",
      "aliases": [
        "CVE-2024-12084",
        "CVE-2024-12085",
        "CVE-2024-12086",
        "CVE-2024-12087",
        "CVE-2024-12088",
        "GHSA-p5pg-x43v-mvqj"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.samba.org/rsync.git/",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "6c8ca91c731b7bf2b081694bda85b7dadc2b7aff"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "3.3.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            },
            {
              "repo": "https://github.com/rsyncproject/rsync",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "6c8ca91c731b7bf2b081694bda85b7dadc2b7aff"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "last_affected": "3.3.0"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StandardRange"
                  },
                  {
                    "cpe": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "3.3.0"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v3.2.7",
            "v3.3.0pre1",
            "v3.2.7pre1",
            "v3.2.6",
            "v3.2.5",
            "v3.2.5pre2",
            "v3.2.5pre1",
            "v3.2.4",
            "v3.2.4pre4",
            "v3.2.4pre3",
            "v3.2.4pre2",
            "v3.2.4pre1",
            "v3.2.3",
            "v3.2.3pre1",
            "v3.2.2",
            "v3.2.2pre3",
            "v3.2.2pre2",
            "v3.2.2pre1",
            "v3.2.1",
            "v3.2.1pre1",
            "v3.2.0",
            "v3.2.0pre3",
            "v3.2.0pre2",
            "v3.2.0pre1",
            "v3.1.3",
            "v3.1.3pre1",
            "v3.1.2",
            "v3.1.2pre1",
            "v3.1.1",
            "v3.1.1pre2",
            "v3.1.1pre1",
            "v3.1.0",
            "v3.1.0pre1",
            "v3.0.3",
            "v3.0.3pre3",
            "v3.0.3pre2",
            "v3.0.3pre1",
            "v3.0.2",
            "v3.0.1",
            "v3.0.1pre3",
            "v3.0.1pre2",
            "v3.0.1pre1",
            "v3.0.0",
            "v3.0.0pre10",
            "v3.0.0pre9",
            "v3.0.0pre8",
            "v3.0.0pre7",
            "v3.0.0pre6",
            "v3.0.0pre5",
            "v3.0.0pre4",
            "v3.0.0pre3",
            "v3.0.0pre2",
            "v3.0.0pre1",
            "v2.6.9",
            "v2.6.9pre3",
            "v2.6.9pre2",
            "v2.6.9pre1",
            "v2.6.8",
            "v2.6.8pre1",
            "v2.6.7",
            "v2.6.7pre3",
            "v2.6.7pre2",
            "v2.6.7pre1",
            "v2.6.6pre1",
            "v2.6.5",
            "v2.6.5pre2",
            "v2.6.5pre1",
            "v2.6.4",
            "v2.6.4pre4",
            "v2.6.4pre3",
            "v2.6.4pre2",
            "v2.6.4pre1",
            "v2.6.3",
            "v2.6.3pre2",
            "v2.6.3pre1",
            "v2.6.2",
            "v2.6.2pre1",
            "v2.6.1",
            "v2.6.1pre2",
            "v2.6.1pre1",
            "v2.6.0",
            "v2.6.0pre2",
            "v2.6.0pre1",
            "v2.5.6",
            "v2.5.5",
            "v2.5.5.rc1",
            "v2.5.4",
            "v2.5.4pre1",
            "v2.5.3",
            "v2.5.3pre1",
            "v2.5.2",
            "v2.5.2pre3",
            "v2.5.2pre2",
            "v2.5.2pre1",
            "v2.5.1",
            "v2.5.1pre3",
            "v2.5.1pre2",
            "v2.5.1pre1",
            "v2.5.0",
            "v2.4.7pre4",
            "v2.4.7pre2",
            "mbp_bk_export0",
            "v2.4.6",
            "v2.4.5",
            "v2.4.4",
            "v2.4.3",
            "v2.4.2",
            "v2.4.1",
            "v2.4.0",
            "v2.3.2",
            "v2.3.1",
            "v2.3.0",
            "v2.2.1",
            "v2.2.0",
            "v2.1.1",
            "v2.1.0",
            "v2.0.19",
            "v2.0.18",
            "v2.0.17",
            "v2.0.16",
            "v2.0.15",
            "v2.0.14",
            "v2.0.13",
            "v2.0.12",
            "v2.0.11",
            "v2.0.10",
            "v2.0.9",
            "v2.0.8",
            "v2.0.7",
            "v2.0.6",
            "v2.0.5",
            "v2.0.4",
            "v2.0.3",
            "v2.0.2",
            "v2.0.1",
            "v2.0.0",
            "v1.7.4",
            "v1.7.3",
            "v1.7.2",
            "v1.7.1",
            "v1.7.0",
            "v1.6.9",
            "v1.6.8",
            "v1.6.7",
            "v1.6.6",
            "v1.6.5",
            "v1.6.4"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-12085.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:23.778413534Z",
      "provider": "osv",
      "references": [
        "https://access.redhat.com/downloads/content/package-browser/",
        "https://catalog.redhat.com/software/containers/",
        "https://kb.cert.org/vuls/id/952657",
        "https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html",
        "https://www.kb.cert.org/vuls/id/952657",
        "https://access.redhat.com/errata/RHBA-2025:6470",
        "https://access.redhat.com/errata/RHSA-2024:6122",
        "https://access.redhat.com/errata/RHSA-2025:0324",
        "https://access.redhat.com/errata/RHSA-2025:0325",
        "https://access.redhat.com/errata/RHSA-2025:0637",
        "https://access.redhat.com/errata/RHSA-2025:0688",
        "https://access.redhat.com/errata/RHSA-2025:0714",
        "https://access.redhat.com/errata/RHSA-2025:0774",
        "https://access.redhat.com/errata/RHSA-2025:0787",
        "https://access.redhat.com/errata/RHSA-2025:0790",
        "https://access.redhat.com/errata/RHSA-2025:0849",
        "https://access.redhat.com/errata/RHSA-2025:0884",
        "https://access.redhat.com/errata/RHSA-2025:0885",
        "https://access.redhat.com/errata/RHSA-2025:1120",
        "https://access.redhat.com/errata/RHSA-2025:1123",
        "https://access.redhat.com/errata/RHSA-2025:1128",
        "https://access.redhat.com/errata/RHSA-2025:1225",
        "https://access.redhat.com/errata/RHSA-2025:1227",
        "https://access.redhat.com/errata/RHSA-2025:1242",
        "https://access.redhat.com/errata/RHSA-2025:1451",
        "https://access.redhat.com/errata/RHSA-2025:21885",
        "https://access.redhat.com/errata/RHSA-2025:2701",
        "https://access.redhat.com/security/cve/CVE-2024-12085",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12085.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-12085",
        "https://security.netapp.com/advisory/ntap-20250131-0002/",
        "https://bugzilla.redhat.com/show_bug.cgi?id=2330539",
        "https://github.com/RsyncProject/rsync",
        "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-908"
        ],
        "cna_assigner": "redhat",
        "unresolved_ranges": [
          {
            "extracted_events": [
              {
                "range": [
                  {
                    "fixed": "0:3.4.1-2.el10"
                  },
                  {
                    "fixed": "0:3.0.6-12.el6_10.1"
                  },
                  {
                    "fixed": "0:3.1.2-12.el7_9.1"
                  },
                  {
                    "fixed": "0:3.1.3-20.el8_10"
                  },
                  {
                    "fixed": "0:3.1.3-7.el8_2.3"
                  },
                  {
                    "fixed": "0:3.1.3-12.el8_4.3"
                  },
                  {
                    "fixed": "0:3.1.3-12.el8_4.3"
                  },
                  {
                    "fixed": "0:3.1.3-12.el8_4.3"
                  },
                  {
                    "fixed": "0:3.1.3-14.el8_6.6"
                  },
                  {
                    "fixed": "0:3.1.3-14.el8_6.6"
                  },
                  {
                    "fixed": "0:3.1.3-14.el8_6.6"
                  },
                  {
                    "fixed": "0:3.1.3-20.el8_8.1"
                  },
                  {
                    "fixed": "0:3.2.3-20.el9_5.1"
                  },
                  {
                    "fixed": "0:3.2.3-20.el9_5.1"
                  },
                  {
                    "fixed": "0:3.2.3-9.el9_0.3"
                  },
                  {
                    "fixed": "0:3.2.3-19.el9_2.1"
                  },
                  {
                    "fixed": "0:3.2.3-19.el9_4.1"
                  },
                  {
                    "fixed": "412.86.202502100314-0"
                  },
                  {
                    "fixed": "413.92.202503112237-0"
                  },
                  {
                    "fixed": "414.92.202502111902-0"
                  },
                  {
                    "fixed": "415.92.202501281917-0"
                  },
                  {
                    "fixed": "v4.16.0-202501311735.p0.g2cb0020.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.16.0-202501311933.p0.g4246d04.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.16.0-202501311605.p0.g4246d04.assembly.stream.el9"
                  },
                  {
                    "fixed": "417.94.202502051822-0"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g088dcaf.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd4fb1b6.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g11ced00.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gf648c78.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502100301.p0.g2e139ed.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g3193a75.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041302.p0.g1ad8f2e.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g7149f2d.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g962ccca.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gba2234b.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502111035.p0.gf76635f.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502100934.p0.gc00c7c9.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g07daee4.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502040032.p0.ge5a4005.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502040032.p0.g5348c85.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041302.p0.g51a74ac.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g5348c85.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g3f6d1d8.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g0e11616.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gc395190.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g6bd77fc.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gb51cd6b.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g5c43fe8.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9c24d76.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g987615c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501241902.p0.g6cced66.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g4b34592.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g344c5dc.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g7ec03e9.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g1ede6c3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041201.p0.g3d9304e.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9e2015c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g020f8b8.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd05a6de.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ge8c7c47.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501201133.p0.g4674e81.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g474ad65.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gdfc6c06.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041632.p0.gd1e0195.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g4e26a69.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g3385690.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502050001.p0.g3175f30.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g85cb407.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd17bf3a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502051601.p0.g6fe7000.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g208d50c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502042101.p0.g26f6cb2.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g00882ba.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g8be1749.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502101302.p0.g763313c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g33a1141.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041632.p0.g0fac9aa.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041632.p0.g6182930.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g59ba356.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g01d5fbb.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9852f98.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502061801.p0.gb48488a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502110432.p0.gb707be6.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g6da706d.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041302.p0.g0a6f6eb.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gf1711cf.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g5fd8525.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501231202.p0.gde85e47.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502051601.p0.gd5869b2.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd44fca5.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g3646a10.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gcde5e47.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502110632.p0.g24ccf7a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g18590a1.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g24a6532.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gcb1abfa.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g32e7759.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g39b37c0.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g376f0ea.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gcca3837.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g3a97784.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gc21f5d0.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g838d248.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502040032.p0.ga50d4c0.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501281202.p0.g336d783.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502041632.p0.ge36d365.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g914783c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g6ea2356.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gaf54f52.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g7cb8b38.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g14fa4d9.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gf0a670c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502010001.p0.g061909a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502110632.p0.gbe2ef91.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gef05fb5.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ga33026b.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g0fdb727.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g59a8340.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gfeae260.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ge905646.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g5c8b715.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502141933.p0.g8cbca44.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202412170221.p0.ga26fffe.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502100301.p0.g04c22ee.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502071731.p0.g603ad0c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202412170221.p0.gcfbae04.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g716eb0e.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g526498a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gcb5a929.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g50d1714.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g3f4542e.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ga336f0b.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g53274f1.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502071432.p0.g62f62f7.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ga371641.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd914e77.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g53c01a7.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502100153.p0.g120ba67.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502141933.p0.g6d082d8.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502110432.p0.ga5a8299.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g1b2791b.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g69733b2.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g82c7731.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g391c1b0.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501272332.p0.g74f285c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502040032.p0.gc864494.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502110432.p0.gbd32ac5.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9506a1f.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ge4c214c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd9fe8f3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9c2ff5e.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502060334.p0.g2575ff4.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202412200107.p0.g2957f13.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd352778.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502052031.p0.gf95a88f.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502051931.p0.g74a2477.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502060238.p0.g73d65db.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g5bfc808.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gf5b1470.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g9432fd3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g90891d4.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gb0f0dc4.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501290901.p0.g5a1e906.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g182471a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502111035.p0.g5f6ad07.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502051032.p0.gacb9630.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd36aea3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501291931.p0.g01fc505.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g17ae6fb.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ge253fa3.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.ge513c91.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gb7efb8c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g8de8eb1.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gede3c14.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd9fe2d8.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g1f7d647.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g700802f.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502110432.p0.g0c7bed9.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g314589c.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502110432.p0.ga50d4c0.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gc414d1f.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gd664fe2.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202502060601.p0.g39b3034.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.gcfcad01.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g7cf7fe2.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g1db726a.assembly.stream.el9"
                  },
                  {
                    "fixed": "v4.18.0-202501230001.p0.g0feae25.assembly.stream.el9"
                  },
                  {
                    "fixed": "418.94.202502100215-0"
                  },
                  {
                    "fixed": "v5.8.17-22"
                  },
                  {
                    "fixed": "v5.8.17-10"
                  },
                  {
                    "fixed": "v6.8.1-454"
                  },
                  {
                    "fixed": "v5.8.17-17"
                  },
                  {
                    "fixed": "v1.0.0-537"
                  },
                  {
                    "fixed": "v5.8.17-4"
                  },
                  {
                    "fixed": "v0.4.0-339"
                  },
                  {
                    "fixed": "v5.8.17-4"
                  },
                  {
                    "fixed": "v1.1.0-320"
                  },
                  {
                    "fixed": "v5.8.1-552"
                  },
                  {
                    "fixed": "v3.3.2-9"
                  },
                  {
                    "fixed": "v5.8.17-5"
                  },
                  {
                    "fixed": "v5.8.17-12"
                  },
                  {
                    "fixed": "v5.8.17-5"
                  },
                  {
                    "fixed": "v0.1.0-725"
                  },
                  {
                    "fixed": "v0.1.0-342"
                  },
                  {
                    "fixed": "v0.28.1-88"
                  },
                  {
                    "fixed": "v5.9.11-25"
                  },
                  {
                    "fixed": "v5.9.11-11"
                  },
                  {
                    "fixed": "v0.4.0-340"
                  },
                  {
                    "fixed": "v5.9.11-5"
                  },
                  {
                    "fixed": "v1.1.0-321"
                  },
                  {
                    "fixed": "v3.3.2-8"
                  },
                  {
                    "fixed": "v5.9.11-6"
                  },
                  {
                    "fixed": "v5.9.11-9"
                  },
                  {
                    "fixed": "v5.9.11-4"
                  },
                  {
                    "fixed": "v0.1.0-724"
                  },
                  {
                    "fixed": "v0.1.0-341"
                  },
                  {
                    "fixed": "v0.34.1-30"
                  },
                  {
                    "fixed": "1.8.0"
                  }
                ],
                "source": "AFFECTED_FIELD",
                "strategy": "InverseAffectedRanges"
              }
            ]
          }
        ],
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12085.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2024-12084",
        "evidence": "/aliases"
      },
      {
        "value": "CVE-2024-12085",
        "evidence": "/id"
      },
      {
        "value": "CVE-2024-12086",
        "evidence": "/aliases"
      },
      {
        "value": "CVE-2024-12087",
        "evidence": "/aliases"
      },
      {
        "value": "CVE-2024-12088",
        "evidence": "/aliases"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 490284,
  "published_at": "2025-01-14T17:37:16.036+00:00"
}