3681 matches found
EulerOS 2.0 SP11 : rsync (EulerOS-SA-2026-4376)
According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victi...
EulerOS 2.0 SP11 : rsync (EulerOS-SA-2026-4286)
According to the versions of the rsync packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victi...
git-remote-gcrypt
================= git-remote-gcrypt Repositorio git remoto cifrado con GNU Privacy Guard :Sección del manual: 1 Descripción git-remote-gcrypt es un ayudante de remoto git para enviar y recibir desde repositorios cifrados con GnuPG, utilizando un formato personalizado. Este ayudante de remoto mane...
CVE-2024-12084
CVE-2024-12084 A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths s2length in the code. When MAXDIGESTLEN exceeds the fixed SUMLENGTH 16 bytes, an attacker can write out of bounds in the sum2 buffer. How...
rsync: Fix of 5 CVEs
CVE-2026-53790: refuse a shell-active RSYNCCONNECTPROG %H host and quote it; escape backtick, newline and carriage return in remote-shell arguments - CVE-2026-53793: confine a "/./" inner-module chroot: secure opens, changedir, chmod, rename, delta-basis opens and alt-dest basis stats, resolved...
Astra Linux – Vulnerability in rsync
In rsync versions 3.0.1 through 3.4.1, the receivexattr function relies on an untrusted length value during a qsort call, resulting in a use-after-free vulnerability. The vulnerability is exploitable when rsync is executed with the -X option also known as --xattrs. On Linux, many but not all comm...
Astra Linux – Vulnerability in rsync
A flaw was discovered in rsync that can be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length, causing a comparison between a checksum and uninitialized memory, and resulting in the leakage of one byte of uninitialized stack data ...
ROS-20261005-73-0034
The vulnerability in rsync is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261005-73-0023
The vulnerability in rsync is related to incorrect input of configuration data. The vulnerability can be exploited remotely...
ROS-20261005-73-0024
The vulnerability in rsync relates to the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20261005-73-0025
The vulnerability in rsync is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20261005-73-0031
The vulnerability in rsync relates to the incorrect handling of the link before accessing a file. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20261005-73-0027
The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ROS-20261005-73-0004
The vulnerability of the addimpliedinclude function in the rsync network daemon—a utility for transferring and synchronizing files—is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
ROS-20261005-73-0021
The vulnerability in rsync is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20261005-73-0009
The vulnerability of the readargs function in the Rsync utility for file transfer and synchronization is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
ROS-20261005-73-0012
The vulnerability of the hashsearch function in the Rsync file transfer and synchronization utility is related to its inefficient algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
ROS-20261005-73-0020
The vulnerability in rsync is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...