Samba Rsync vulnerabilities

• rsyncproject rsync rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions CVE-2026-119741 Fix available 8.7 HighNovember 3, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure CVE-2026-70452 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() CVE-2026-70453 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode CVE-2026-70454 Fix available 7.6 HighAugust 13, 2026
• rsyncproject rsync rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion CVE-2026-70455 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() CVE-2026-70456 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() CVE-2026-70457 Fix available 8.3 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling CVE-2026-70458 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry CVE-2026-70459 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 Fix available 9.2 CriticalAugust 13, 2026
• rsyncproject rsync rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry CVE-2026-70461 Fix available 8.8 HighAugust 13, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT CVE-2026-70462 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing CVE-2026-70463 Public exploitFix available 8.6 HighAugust 13, 2026
• rsyncproject rsync rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall CVE-2026-70464 Fix available 8.7 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition Directory Traversal CVE-2026-53801 Fix available 8.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition via --remove-source-files CVE-2026-53800 Fix available 5.7 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application CVE-2026-53799 Fix available 7.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Race Condition Information Disclosure CVE-2026-53797 Fix available 5.7 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling CVE-2026-53796 Fix available 5.8 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest CVE-2026-53795 Fix available 7.2 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error CVE-2026-53794 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode CVE-2026-53793 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block CVE-2026-53792 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header CVE-2026-53791 Fix available 9.1 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Command Injection via Multiple Code Paths CVE-2026-53790 Fix available 9.2 CriticalAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Deletion via Malicious File List CVE-2026-53789 Fix available 7.1 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping CVE-2026-53788 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping CVE-2026-53798 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive CVE-2026-53786 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Traversal Write Escape via --relative Mode CVE-2026-53785 Fix available 6.9 MediumAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Path Traversal via Symlink Module Root CVE-2026-53784 Fix available 8.4 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync CVE-2026-53783 Fix available 8.6 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Symlink Following Arbitrary File Overwrite CVE-2026-53803 Fix available 8.5 HighAugust 13, 2026
• rsyncproject rsync rsync < 3.5.0 Arbitrary File Read via Symlink Following CVE-2026-53802 Fix available 8.4 HighAugust 13, 2026
• rsyncproject rsync Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy CVE-2026-45232 Fix available 2.1 LowMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() CVE-2026-43620 Fix available 6.9 MediumMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls CVE-2026-43619 Fix available 7.2 HighMay 20, 2026
• rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 more Rsync < 3.4.3 Integer Overflow Information Disclosure CVE-2026-43618 Fix available 6.1 MediumMay 20, 2026
• rsyncproject rsync Rsync < 3.4.3 Authorization Bypass via Hostname Resolution CVE-2026-43617 Fix available 6.3 MediumMay 20, 2026
• rsyncproject rsync, red hat discovery 2, enterprise linux 10 +5 more +7 more Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write CVE-2026-29518 Fix available 7.3 HighMay 20, 2026
• samba rsync, red hat discovery 2, enterprise linux 10 +24 more +26 more In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort... CVE-2026-41035 Fix available 7.4 HighApril 16, 2026
• rsync Rsync: Out of bounds array access via negative index CVE-2025-10158 Fix available 4.3 MediumNovember 18, 2025
• samba rsync, almalinux, archlinux arch linux +24 more +26 more Rsync: --safe-links option bypass leads to path traversal CVE-2024-12088 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +32 more +34 more Rsync: path traversal vulnerability in rsync CVE-2024-12087 Fix available 6.5 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +13 more +15 more Rsync: rsync server leaks arbitrary client files CVE-2024-12086 Fix available 6.1 MediumJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +44 more +46 more Rsync: info leak via uninitialized stack contents CVE-2024-12085 Public exploitFix available 7.5 HighJanuary 9, 2025
• samba rsync, almalinux, archlinux arch linux +11 more +13 more Rsync: heap buffer overflow in rsync due to improper checksum length handling CVE-2024-12084 Public exploitFix available EPSS 72.5% 9.8 CriticalJanuary 9, 2025
• samba rsync, fedoraproject fedora +1 more An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write... CVE-2022-29154 Public exploitFix available 7.4 HighAugust 2, 2022
• samba rsync A flaw was found in rsync in versions since 3.2.0pre1. Rsync improperly validates certificate... CVE-2020-14387 Fix available 7.4 HighMay 27, 2021
• samba rsync, canonical ubuntu linux, debian linux +2 more The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent... CVE-2018-5764 Public exploitFix available 7.5 HighJanuary 17, 2018
• Show olderLoading…