8 matches found
CVE-2026-119741
rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...
CVE-2026-119741 rsync through 3.5.1 Denial of Service via hash_search() Checksum Collisions
rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...
CVE-2026-119741
Rsync versions through 3.5.1 are vulnerable to a Denial of Service (DoS) via checksum collisions in the delta-transfer sender's hash_search() function located in match.c . The root cause involves an Inefficient Algorithmic Complexity (CWE-407) where unauthenticated attackers pulling from a public...
EUVD-2026-115914
rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...
CVE-2026-119741: RsyncProject rsync: rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c…
rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hashsearch in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak...
AZL-95798 CVE-2026-53793 affecting package rsync for versions less than 3.5.0-1
rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...
CVE-2026-44510
Rsync is a file-copying tool that uses a delta-transfer algorithm to synchronize remote and local files. In versions prior to 3.4.3, the receiver-side out-of-bounds array read in rsync's recvfiles lets a malicious rsync server or any peer acting in the sender role deterministically crash any rsyn...
