RsyncProject / Rsync
39 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-70452 | rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure | CRITICAL | 9.1 | Aug 13, 2026 |
| CVE-2026-70453 | rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() | HIGH | 8.7 | Aug 13, 2026 |
| CVE-2026-70454 | rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode | HIGH | 7.6 | Aug 13, 2026 |
| CVE-2026-70455 | rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion | HIGH | 8.7 | Aug 13, 2026 |
| CVE-2026-70456 | rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() | HIGH | 8.8 | Aug 13, 2026 |
| CVE-2026-70457 | rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() | HIGH | 8.3 | Aug 13, 2026 |
| CVE-2026-70458 | rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling | HIGH | 8.8 | Aug 13, 2026 |
| CVE-2026-70459 | rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry | MEDIUM | 6.9 | Aug 13, 2026 |
| CVE-2026-70460 | rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink | CRITICAL | 9.2 | Aug 13, 2026 |
| CVE-2026-70461 | rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry | HIGH | 8.8 | Aug 13, 2026 |
| CVE-2026-70462 | rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT | HIGH | 7.1 | Aug 13, 2026 |
| CVE-2026-70463 | rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing | HIGH | 8.6 | Aug 13, 2026 |
| CVE-2026-70464 | rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall | HIGH | 8.7 | Aug 13, 2026 |
| CVE-2026-53801 | rsync < 3.5.0 Symlink Race Condition Directory Traversal | HIGH | 8.2 | Aug 13, 2026 |
| CVE-2026-53800 | rsync < 3.5.0 Symlink Race Condition via --remove-source-files | MEDIUM | 5.7 | Aug 13, 2026 |
| CVE-2026-53799 | rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application | HIGH | 7.2 | Aug 13, 2026 |
| CVE-2026-53797 | rsync < 3.5.0 Symlink Race Condition Information Disclosure | MEDIUM | 5.7 | Aug 13, 2026 |
| CVE-2026-53796 | rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling | MEDIUM | 5.8 | Aug 13, 2026 |
| CVE-2026-53795 | rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest | HIGH | 7.2 | Aug 13, 2026 |
| CVE-2026-53794 | rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error | MEDIUM | 6.9 | Aug 13, 2026 |
| CVE-2026-53793 | rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode | CRITICAL | 9.1 | Aug 13, 2026 |
| CVE-2026-53792 | rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block | HIGH | 7.1 | Aug 13, 2026 |
| CVE-2026-53791 | rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header | CRITICAL | 9.1 | Aug 13, 2026 |
| CVE-2026-53790 | rsync < 3.5.0 Command Injection via Multiple Code Paths | CRITICAL | 9.2 | Aug 13, 2026 |
| CVE-2026-53789 | rsync < 3.5.0 Arbitrary File Deletion via Malicious File List | HIGH | 7.1 | Aug 13, 2026 |
Showing 1 to 25 of 39 CVEs