rsync vulnerabilities (Red Hat)
40 vulnerabilities.
-
rsyncRed Hat rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure 9.1 Critical -
rsyncRed Hat rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() 8.7 High -
rsyncRed Hat rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode 7.6 High -
rsyncRed Hat rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion 8.7 High -
rsyncRed Hat rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() 8.8 High -
rsyncRed Hat rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() 8.3 High -
rsyncRed Hat rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling 8.8 High -
rsyncRed Hat rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink 9.2 Critical -
rsyncRed Hat rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry 8.8 High -
rsyncRed Hat rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing 8.6 High -
rsyncRed Hat rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall 8.7 High -
rsyncRed Hat rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest 7.2 High -
rsyncRed Hat rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode 9.1 Critical -
rsyncRed Hat rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header 9.1 Critical -
rsyncRed Hat rsync < 3.5.0 Command Injection via Multiple Code Paths 9.2 Critical -
rsyncRed Hat rsync < 3.5.0 Arbitrary File Deletion via Malicious File List 7.1 High -
rsyncRed Hat rsync < 3.5.0 Path Traversal Write Escape via --relative Mode 6.9 Medium -
rsyncRed Hat rsync < 3.5.0 Path Traversal via Symlink Module Root 8.4 High -
rsyncRed Hat rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync 8.6 High -
rsyncRed Hat rsync < 3.5.0 Symlink Following Arbitrary File Overwrite 8.5 High -
rsyncRed Hat rsync < 3.5.0 Arbitrary File Read via Symlink Following 8.4 High -
rsyncRed Hat Rsync < 3.4.3 Integer Overflow Information Disclosure 6.1 Medium -
rsyncRed Hat Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write 7.3 High -
rsyncRed Hat In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort... 7.4 High -
rsyncRed Hat Rsync: Out of bounds array access via negative index 4.3 Medium -
rsyncRed Hat Rsync: race condition in rsync handling symbolic links 5.6 Medium -
rsyncRed Hat Rsync: --safe-links option bypass leads to path traversal 6.5 Medium -
rsyncRed Hat Rsync: path traversal vulnerability in rsync 6.5 Medium -
rsyncRed Hat Rsync: rsync server leaks arbitrary client files 6.1 Medium -
rsyncRed Hat Rsync: info leak via uninitialized stack contents 7.5 High -
rsyncRed Hat Rsync: heap buffer overflow in rsync due to improper checksum length handling 9.8 Critical -
rsyncRed Hat zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... 9.8 Critical -
rsyncRed Hat An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write... 7.4 High -
rsyncRed Hat Nokogiri affected by zlib's Out-of-bounds Write vulnerability 7.5 High -
rsyncRed Hat inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by... 8.8 High -
rsyncRed Hat rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows... 5.1 Medium -
rsyncRed Hat Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows... 10.0 High -
rsyncRed Hat Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and... 6.4 Medium -
rsyncRed Hat rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without... 5.0 Medium -
rsyncRed Hat Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote... 7.5 High