3340 matches found
CVE-2025-10158
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...
CVE-2025-10158 Rsync: Out of bounds array access via negative index
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...
CVE-2025-10158
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...
CVE-2025-10158
CVE-2025-10158 affects rsync across multiple distros. The issue is a potential out-of-bounds read on a heap buffer triggered by a negative array index when a malicious client acts as the receiver of an rsync transfer. Exploitation requires at least read access to the remote rsync module. Publicly...
Linux Distros Unpatched Vulnerability : CVE-2025-10158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The...
CVE-2025-10158: Improper Validation of Array Index
A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue...
CLSA-2025-1763136711 Fix CVE(s): CVE-2022-29154, CVE-2024-12087, CVE-2024-12088
SECURITY UPDATE: malicious remote servers to write arbitrary files inside the directories of connecting peers: - debian/patches/els/0001-CVE-2022-29154.patch: fix insufficient validation of file names. - CVE-2022-29154. SECURITY UPDATE: path traversal vulnerability. -...
CLSA-2025-1762544268 rsync: Fix of CVE-2016-9840
CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...
CLSA-2025-1762540366 rsync: Fix of CVE-2016-9840
CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...
CLSA-2025-1762540173 rsync: Fix of CVE-2016-9840
CVE-2016-9840: fix improper pointer arithmetic in inftrees.c...
CLSA-2025-1760716390 Update of rsync
Bump version to 3.1.2-12.0.1...
EUVD-2015-0940
Malware in sbrugna...
EUVD-2017-17748
Malware in sbrugna...
EUVD-2005-3709
Malware in sbrugna...
EUVD-2004-0790
Malware in sbrugna...
EUVD-2014-2949
Malware in sbrugna...
EUVD-2017-8598
Malware in sbrugna...
EUVD-2017-7410
Malware in sbrugna...