CVE-2026-70459

rsync 3.0.0 before 3.5.0 is affected by a null pointer dereference in the daemon child process when processing a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the entry as a directory structure pointer without type verification, causing an invalid/un...

PT-2026-71659

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.0 through 3.4.x Description A null pointer dereference occurs in the daemon child process. A remote attacker can cause the daemon to crash by sending a file list where the first entry is a dot entry not typed as a directory...

CVE-2006-4262

Multiple buffer overflows in cscope 15.5 and earlier allow user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via multiple vectors including 1 a long pathname that is not properly handled during file list parsing, 2 long pathnames that result from path...