rsync vulnerabilities (Debian)
72 vulnerabilities.
rsyncDebianAn issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write...7.4 HighrsyncDebianA flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate...7.4 HighrsyncDebianThe parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent...7.5 HighrsyncDebianThe daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp...9.8 CriticalrsyncDebianThe recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before...3.7 LowrsyncDebianThe receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a...9.8 CriticalrsyncDebianThe crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have...9.8 CriticalrsyncDebianThe inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to...8.8 HighrsyncDebianinffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...9.8 CriticalrsyncDebianinftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by...8.8 HighrsyncDebianrsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in...6.4 MediumrsyncDebianThe check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to...7.8 HighrsyncDebianrsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows...5.1 MediumrsyncDebianBuffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might...7.5 HighrsyncDebianUnspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows...10.0 HighrsyncDebianrsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows...9.3 HighrsyncDebianMultiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute...6.8 MediumrsyncDebianInteger overflow in the receive_xattr function in the extended attributes patch (xattr.c) for...7.5 HighrsyncDebianDirectory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and...6.4 MediumrsyncDebianrsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without...5.0 MediumrsyncDebianBuffer overflow in the open_socket_out function in socket.c for rsync 2.5.7 and earlier allows...4.6 MediumrsyncDebianHeap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote...7.5 High