Lucene search
+L

3224 matches found

RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.8 views

rsync: rsync: Arbitrary file write via path traversal in --relative mode

A path traversal vulnerability in rsync's --relative mode allows a malicious sender to craft symlink paths, enabling arbitrary file writes outside the destination directory...

7.1CVSS6.7AI score0.00192EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.9 views

rsync: rsync: Memory corruption via crafted file entries

A flaw was found in rsync. This out-of-bounds write vulnerability allows attackers to corrupt memory by triggering specific processing on specially crafted file entries when hard-link preservation is not active. This can lead to denial of service or other unpredictable system behavior...

8.8CVSS6.5AI score0.00396EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.9 views

rsync: rsync: TLS Certificate Validation Bypass allows interception of encrypted sessions

A flaw was found in the rsync-ssl wrapper script's TLS certificate validation. An on-path attacker can present self-signed or invalid certificates to intercept, decrypt, or tamper with encrypted sessions. Because rsync fails to validate the certificate against a trusted CA or verify hostname...

8CVSS6.5AI score0.0019EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.11 views

rsync: rsync: Heap Out-of-Bounds Write via crafted argument list

A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...

8.8CVSS7.3AI score0.00396EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.9 views

rsync: rsync: Local Privilege Escalation via Symlink Following

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...

8.5CVSS6.7AI score0.00229EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.9 views

rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources...

9.1CVSS6.7AI score0.00501EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.8 views

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.5AI score0.00238EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Authorization bypass via `auth users` directive parsing

An authorization bypass flaw was found in the rsync daemon. The auth users directive parser incorrectly handles group names containing spaces due to comma-only tokenization. This flaw causes deny rules to be silently discarded, allowing an authenticated user to bypass restrictions and gain...

8.6CVSS6.7AI score0.00364EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

A flaw was found in rsync. This vulnerability allows remote clients to bypass path confinement, a security measure designed to restrict file access. By crafting specific paths that include a '/./' boundary marker within a chroot environment, an attacker can gain unauthorized read or write access ...

9.1CVSS6.5AI score0.00393EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options

A flaw was found in rsync. A remote attacker can exploit this vulnerability by specifying an absolute path using the --temp-dir or --link-dest options. This bypasses the rename-confinement logic, allowing the attacker to write files to arbitrary locations outside the intended destination tree,...

8.1CVSS6.7AI score0.00396EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary file write via path traversal in --relative mode

A path traversal vulnerability in rsync's --relative mode allows a malicious sender to craft symlink paths, enabling arbitrary file writes outside the destination directory...

7.1CVSS6.7AI score0.00192EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary file deletion via malicious file list

An improper path handling vulnerability in rsync allows a remote attacker to delete arbitrary files on the receiving system. By sending a specially crafted file list during synchronization, an attacker can expand the scope of --delete operations beyond the target directory, potentially causing a...

8.1CVSS6.8AI score0.00357EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.8 views

rsync: rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

A flaw in rsync allows an unauthenticated remote attacker to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source IP address, granting unauthorized access to restricted resources...

9.1CVSS6.7AI score0.00501EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.9 views

rsync: rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure

A flaw was found in rsync. This vulnerability allows a remote attacker to bypass hostname-based access control rules. By inducing DNS resolution failures, the rsync daemon incorrectly skips deny rules, granting unauthorized access to restricted module file trees...

9.1CVSS6.6AI score0.00462EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.9 views

rsync: rsync: Memory corruption via out-of-bounds write in size parsing

An out-of-bounds write vulnerability in rsync's parsesizearg function allows a remote attacker to cause memory corruption. The flaw is triggered when snprintf truncates a formatted size string, resulting in an incorrect memory array index. Exploitation can lead to a denial of service and...

8.3CVSS6.8AI score0.00377EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync < 3.5.0 Command Injection via Multiple Code Paths

A command injection vulnerability in rsync allows remote attackers to execute arbitrary commands by supplying shell metacharacters or newlines in unsanitized inputs, such as hostnames or hostspecs. This impacts multiple vectors—including the RSYNCCONNECTPROG variable, daemon hooks, rsync-ssl, and...

9.2CVSS7.2AI score0.00515EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary File Read via Symlink Following

A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...

8.4CVSS6.5AI score0.00238EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.8 views

rsync: rsync: Local Privilege Escalation via Symlink Following

A symlink-following vulnerability in rsync allows local attackers to redirect predictable output paths to arbitrary filesystem locations. When rsync runs with elevated privileges such as setuid or a privileged daemon, this enables arbitrary file overwrites and local privilege escalation...

8.5CVSS6.7AI score0.00229EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Heap Out-of-Bounds Write via crafted argument list

A flaw was found in rsync. A remote attacker could exploit an out-of-bounds write vulnerability in the readargs function by sending a specially crafted argument list. This could lead to corruption of adjacent memory, potentially causing a denial of service or, in some cases, arbitrary code...

8.8CVSS7.3AI score0.00396EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Information disclosure and denial of service via crafted files-from entry

A flaw was found in rsync. Remote unauthenticated attackers can exploit a heap out-of-bounds write vulnerability by supplying a crafted files-from entry. This entry, containing both an interior and trailing backslash, causes the addimpliedinclude function to under-count the trailing backslash whe...

8.8CVSS6.5AI score0.0057EPSS
SaveExploits0References7
Rows per page
Query Builder