CVE-2024-12084

Vendor

GitLab

Product

GitLab, Rsync / Rsyslog / NTP

CVSS v3.1

8.7 AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Exposure class

Developer platform, Operating system

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 40
   GitLab release GitLab 9 Jul 2025

   GitLab Patch Release: 18.1.2, 18.0.4, 17.11.6

   On July 9, 2025, we released versions 18.1.2, 18.0.4, 17.11.6 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed…

   CVSS 8.7 Fix available CVE-2025-6948CVE-2025-3396CVE-2025-4972+3 more GitLab
2. 13
   Research Binarly 30 Jan 2026

   VulHunt in Practice: Detecting a Remote Code Execution Vulnerability in rsync

   We walk through writing a VulHunt rule to detect CVE-2024-12084, a heap-based buffer overflow in rsync. Starting from understanding the vulnerability's root cause, we build detection logic step by step — covering rule metadata…

   CVE-2024-12084