CVE-2025-67901

openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a length of zero for block data, because the relationship between p-rem and p-len is not checked...

CVE-2025-67901

CVE-2025-67901 affects openrsync up to version 0.5.0, used in OpenBSD up to 7.8 and elsewhere. The issue allows a client to trigger a server SIGSEGV by sending a zero-length block, caused by the unchecked relationship between p->rem and p->len. Public references come from OpenBSD/openrsync ...