32 matches found
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: rsync (UTSA-2026-130114)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130114 advisory. rsync 3.0.1 before 3.5.0contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by...
ROS-20261005-73-0009
The vulnerability of the readargs function in the Rsync utility for file transfer and synchronization is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1790173668)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1790173668 advisory. - rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary...
rsync: rsync: Heap Out-of-Bounds Write via crafted argument list
A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...
CentOS Linux 7 [TuxCare] Security Update: rsync (CENTOS7:CLSA-2026:1789580939)
The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1789580939 advisory. - rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt...
CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.4:CLSA-2026:1789579702)
The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1789579702 advisory. - rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt...
CLSA-2026-1789580327 rsync: Fix of CVE-2026-70456
CVE-2026-70456: reserve room for the trailing NULL before readargs stores it, so a post-dot daemon request that lands argc on maxargs cannot write one slot past the argv allocation...
CLSA-2026-1789579702 rsync: Fix of CVE-2026-70456
CVE-2026-70456: heap out-of-bounds write in the daemon readargs because the post-dot argv growth path globexpand/globmatch reserved room only for the entry being added, so a request line landing argc on exactly maxargs made the trailing argvargc = NULL an 8-byte write one slot past the...
CLSA-2026-1789579460 rsync: Fix of CVE-2026-70456
CVE-2026-70456: reserve room for the trailing NULL before readargs stores it, so a post-dot daemon request that lands argc on maxargs cannot write one slot past the argv allocation...
CLSA-2026-1789569255 Fix CVE(s): CVE-2026-70456
SECURITY UPDATE: out-of-bounds NULL write past the argv allocation in the daemon's readargs - debian/patches/CVE-2026-70456.patch: grow argv to argc+1 entries before storing the trailing NULL in readargs, since the post-dot globexpand/globmatch path reserves room only for the entry it adds and th...
Rsync Heap Buffer Overflow DoS
The vulnerability in the readargs function of the Rsync file transfer and synchronization utility is related to buffer overflow. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
rsync: rsync: Heap Out-of-Bounds Write via crafted argument list
A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...
rsync: rsync: Heap Out-of-Bounds Write via crafted argument list
A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...
CLSA-2026-1788335736 Fix of 13 CVEs
SECURITY UPDATE: peer-driven one-byte heap out-of-bounds write in addimpliedinclude from a files-from entry carrying both an interior and a trailing backslash: - debian/patches/els/0009-CVE-2026-70461.patch: count a trailing backslash when sizing the appended-wildcard pattern. - CVE-2026-70461...
rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
...
CVE-2026-70456
A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...
SUSE CVE-2026-70456
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...
Out-of-bounds Write
Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the readargs function. An attacker can corrupt adjacent heap memory by sending a crafted argument list that causes the allocation for arguments to be exactly full, resulting in a write of a NULL terminator one sl...
ALPINE-CVE-2026-70456
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...
AZL-95843 CVE-2026-70456 affecting package rsync for versions less than 3.5.0-1
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...