Lucene search
K

CVE-2026-43617 Rsync < 3.4.3 Authorization Bypass via Hostname Resolution

šŸ—“ļøĀ 20 May 2026Ā 00:52:38Reported byĀ VulnCheckTypeĀ 
cvelist
Ā cvelist
šŸ”—Ā www.cve.orgšŸ‘Ā 37Ā Views

Rsync version 3.4.2 and earlier allow authorization bypass by manipulating reverse domain name pointer records to defeat hostname deny rules when change root is configured.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-43617
20 May 202600:52
–attackerkb
AlpineLinux
CVE-2026-43617
20 May 202600:52
–alpinelinux
CBLMariner
CVE-2026-43617 affecting package rsync for versions less than 3.4.3-1
23 May 202615:30
–cbl_mariner
Circl
CVE-2026-43617
20 May 202603:07
–circl
CNNVD
Rsync å®‰å…Øę¼ę“ž
20 May 202600:00
–cnnvd
CVE
CVE-2026-43617
20 May 202600:52
–cve
Debian
[SECURITY] [DLA 4591-1] rsync security update
20 May 202614:39
–debian
Debian
[SECURITY] [DSA 6282-1] rsync security update
20 May 202613:26
–debian
Debian CVE
CVE-2026-43617
20 May 202600:52
–debiancve
Tenable Nessus
Debian dla-4591 : rsync - security update
20 May 202600:00
–nessus
Rows per page
[
  {
    "vendor": "RsyncProject",
    "product": "rsync",
    "repo": "https://github.com/RsyncProject/rsync",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThan": "3.4.3"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation