Rsyncproject Rsync vulnerabilities

• rsyncproject rsync rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions CVE-2026-119741 Fix available 8.7 HighNovember 3, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure CVE-2026-70452 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() CVE-2026-70453 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode CVE-2026-70454 Fix available 7.6 HighAugust 13, 2026
• rsyncproject rsync rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion CVE-2026-70455 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() CVE-2026-70456 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() CVE-2026-70457 Fix available 8.3 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling CVE-2026-70458 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry CVE-2026-70459 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 Fix available 9.2 CriticalAugust 13, 2026
• rsyncproject rsync rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry CVE-2026-70461 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT CVE-2026-70462 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing CVE-2026-70463 Public exploitFix available 8.6 HighAugust 13, 2026
• rsyncproject rsync rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall CVE-2026-70464 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition Directory Traversal CVE-2026-53801 Fix available 8.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition via --remove-source-files CVE-2026-53800 Fix available 5.7 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application CVE-2026-53799 Fix available 7.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition Information Disclosure CVE-2026-53797 Fix available 5.7 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling CVE-2026-53796 Fix available 5.8 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest CVE-2026-53795 Fix available 7.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error CVE-2026-53794 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode CVE-2026-53793 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block CVE-2026-53792 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header CVE-2026-53791 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Command Injection via Multiple Code Paths CVE-2026-53790 Fix available 9.2 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Deletion via Malicious File List CVE-2026-53789 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping CVE-2026-53788 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping CVE-2026-53798 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive CVE-2026-53786 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Traversal Write Escape via --relative Mode CVE-2026-53785 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Traversal via Symlink Module Root CVE-2026-53784 Fix available 8.4 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync CVE-2026-53783 Fix available 8.6 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Following Arbitrary File Overwrite CVE-2026-53803 Fix available 8.5 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Read via Symlink Following CVE-2026-53802 Fix available 8.4 HighAugust 13, 2026
• rsyncproject rsync Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy CVE-2026-45232 Fix available 2.1 LowMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() CVE-2026-43620 Fix available 6.9 MediumMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls CVE-2026-43619 Fix available 7.2 HighMay 20, 2026
• rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 more Rsync < 3.4.3 Integer Overflow Information Disclosure CVE-2026-43618 Fix available 6.1 MediumMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Authorization Bypass via Hostname Resolution CVE-2026-43617 Fix available 6.3 MediumMay 20, 2026
• rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 more Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write CVE-2026-29518 Fix available 7.3 HighMay 20, 2026