The vulnerability of the HLINK_BUMP module in the Rsync file transfer and synchronization utility allows a hacker to trigger a service failure.

The vulnerability of the HLINKBUMP module in the Rsync file transfer and synchronization utility is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE CVE-2026-70458

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the HLINKBUMP process when handling file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. An attacker can corrupt adjacent heap or stack memory by crafting file entri...

ALPINE-CVE-2026-70458

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...

EUVD-2026-58046

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...

CVE-2026-70458

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...