Every CVE Search/ Get API key

CVE-2018-5764

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent...

7.5 HighPublic exploitFix available

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

6.39%Up 4.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
CVE-2018-5764
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
CVE-2018-5764
Updated
2026-11-02
EUVDEUVD-2018-17533 No score

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
EUVD-2018-17533
Updated
2026-11-03
GitHub AdvisoriesGHSA-qp2v-jrh4-vgj2 7.5

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent...

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
GHSA-qp2v-jrh4-vgj2
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVALPINE-CVE-2018-5764 7.5

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
ALPINE-CVE-2018-5764
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVBELL-CVE-2018-5764 7.5

CVE-2018-5764 does not affect BellSoft software

Record
BELL-CVE-2018-5764
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 10 moreShow less
OSV 7.5

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
CVE-2018-5764
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2018-5764 7.5

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
DEBIAN-CVE-2018-5764
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2018-5764 7.5

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an argument-sanitization protection mechanism.

Record
UBUNTU-CVE-2018-5764
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVCLSA-2026-1776769741 No score

rsync: Fix of 3 CVEs

  • CVE-2017-16548: fix heap overread in receive_xattr by enforcing trailing NUL on received xattr names
  • CVE-2017-17434: sanitize xname in read_ndx_and_attrs and check daemon filter against fnamecmp in recv_files
  • CVE-2018-5764: prevent client from resetting protect_args during the second parse_arguments pass on the daemon
Record
CLSA-2026-1776769741
Updated
2026-11-02
OSVCLSA-2026-1776791634 No score

rsync: Fix of 3 CVEs

  • CVE-2017-16548: fix heap overread in receive_xattr by enforcing trailing NUL on received xattr names
  • CVE-2017-17434: sanitize xname in read_ndx_and_attrs and check daemon filter against fnamecmp in recv_files
  • CVE-2018-5764: prevent client from resetting protect_args during the second parse_arguments pass on the daemon
Record
CLSA-2026-1776791634
Updated
2026-11-02
OSVMGASA-2018-0103 No score

Updated rsync package fixes security vulnerability

It was discovered that rsync incorrectly parsed certain arguments. An attacker could possibly use this to bypass arguments and execute arbitrary code (CVE-2018-5764).

Record
MGASA-2018-0103
Updated
2026-11-02
OSVopenSUSE-SU-2024:11308-1 No score

rsync-3.2.3-2.6 on GA media

These are all security issues fixed in the rsync-3.2.3-2.6 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11308-1
Updated
2026-11-02
OSVSUSE-SU-2018:0172-1 No score

Security update for rsync

This update for rsync fixes one issues.

This security issue was fixed:

  • CVE-2018-5764: The parse_arguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism (bsc#1076503)
Record
SUSE-SU-2018:0172-1
Updated
2026-11-02
OSVSUSE-SU-2018:0174-1 No score

Security update for rsync

This update for rsync fixes one issues.

This security issue was fixed:

  • CVE-2018-5764: The parse_arguments function in options.c did not prevent multiple --protect-args uses, which allowed remote attackers to bypass an argument-sanitization protection mechanism (bsc#1076503).
Record
SUSE-SU-2018:0174-1
Updated
2026-11-02
OSVUSN-3543-1 No score

rsync vulnerabilities

It was discovered that rsync incorrectly handled certain data input. An attacker could possibly use this to cause a denial of service or execute arbitrary code. (CVE-2017-16548)

It was discovered that rsync incorrectly parsed certain arguments. An attacker could possibly use this to bypass arguments and execute arbitrary code. (CVE-2018-5764)

Record
USN-3543-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rsync
Alpine:v3.4
 before 3.1.3-r0
3.1.3-r0
rsync
Alpine:v3.5
 before 3.1.3-r0
3.1.3-r0
rsync
Alpine:v3.6
 before 3.1.3-r0
3.1.3-r0
rsync
Alpine:v3.7
 before 3.1.3-r0
3.1.3-r0
rsync
TuxCare:OracleLinux:6
 before 3.0.6-12.el6.tuxcare.els7
3.0.6-12.el6.tuxcare.els7
rsync
TuxCare:CentOS:6
 before 3.0.6-12.el6.tuxcare.els7
3.0.6-12.el6.tuxcare.els7
rsync
Debian:12
 before 3.1.2-2.2
3.1.2-2.2
rsync
Debian:13
 before 3.1.2-2.2
3.1.2-2.2
rsync
Debian:14
 before 3.1.2-2.2
3.1.2-2.2
rsync
Debian:7
 before 3.0.9-4+deb7u2, plus listed versions
3.0.9-43.0.9-4+deb7u1
3.0.9-4+deb7u2
Show 16 moreShow less
Affected packages
PackageAffectedFixed
rsync
Debian:8
 before 3.1.1-3+deb8u2, plus listed versions
3.1.1-33.1.1-3+deb8u1
3.1.1-3+deb8u2
rsync
Debian:9
 before 3.1.2-1+deb9u3, plus listed versions
3.1.2-13.1.2-1+deb9u13.1.2-1+deb9u2
3.1.2-1+deb9u3
rsync
Mageia:5
 before 3.1.1-5.4.mga5
3.1.1-5.4.mga5
rsync
Mageia:6
 before 3.1.2-1.3.mga6
3.1.2-1.3.mga6
rsync
SUSE:Linux Enterprise Server 11 SP4
 before 3.0.4-2.53.6.1
3.0.4-2.53.6.1
rsync
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 3.0.4-2.53.6.1
3.0.4-2.53.6.1
rsync
SUSE:Linux Enterprise Desktop 12 SP2
 before 3.1.0-13.10.1
3.1.0-13.10.1
rsync
SUSE:Linux Enterprise Desktop 12 SP3
 before 3.1.0-13.10.1
3.1.0-13.10.1
rsync
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 3.1.0-13.10.1
3.1.0-13.10.1
rsync
SUSE:Linux Enterprise Server 12 SP2
 before 3.1.0-13.10.1
3.1.0-13.10.1
rsync
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.1.0-13.10.1
3.1.0-13.10.1
rsync
SUSE:Linux Enterprise Server 12 SP3
 before 3.1.0-13.10.1
3.1.0-13.10.1
rsync
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
 before 3.1.0-13.10.1
3.1.0-13.10.1
rsync
Ubuntu:14.04:LTS
 before 3.1.0-2ubuntu0.4, plus listed versions
3.0.9-4ubuntu13.1.0-23.1.0-2ubuntu0.13.1.0-2ubuntu0.23.1.0-2ubuntu0.3
3.1.0-2ubuntu0.4
rsync
Ubuntu:16.04:LTS
 before 3.1.1-3ubuntu1.2, plus listed versions
3.1.1-33.1.1-3ubuntu13.1.1-3ubuntu1.1
3.1.1-3ubuntu1.2
rsync
openSUSE:Tumbleweed
 before 3.2.3-2.6
3.2.3-2.6

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubwaleedadam360-web/SyncShield2025-09-10

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-5764 is a high vulnerability (CVSS 7.5) in Samba Rsync, published January 17, 2018. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.39%, the 93rd percentile. Fixed in rsync 3.1.3-r0.

References

Show 27 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open