Alibaba Cloud Linux 3 : 0153: rsync (ALINUX3-SA-2022:0153)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2022:0153 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-29154: An issue was discovered in rsync...

Linux Distros Unpatched Vulnerability : CVE-2022-29154

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The serv...

Linux Distros Unpatched Vulnerability : CVE-2017-16548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The receivexattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote...

Linux Distros Unpatched Vulnerability : CVE-2011-1097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service heap memory...

CVE-2022-29154

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A...

UBUNTU-CVE-2019-3463

Insufficient sanitization of arguments passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands...

rsync path traversal issue

When running rsync in daemon mode, no checks were made to prevent clients from writing outside of a module's path' setting...