18 matches found
CVE-2022-29154
CVE-2022-29154 affects rsync prior to 3.2.5, enabling a malicious server (or MITM) to cause the rsync client to write arbitrary files in the client’s directory tree (including sensitive files such as .ssh/authorized_keys). The issue arises from insufficient validation of filenames returned by the...
CVE-2024-12085
CVE-2024-12085 affects rsync; a flaw in checksum comparison allows an attacker to manipulate s2length, causing comparisons against uninitialized memory and leaking one byte of uninitialized stack data per interaction. The issue is rated HIGH (CVSS 3.1: 7.5) with network attack vector and no user ...
CVE-2018-5764
The CVE concerns rsyncd’s parse_arguments in options.c, where multiple uses of --protect-args are not prevented, allowing remote bypass of the argument-sanitization protection mechanism. Affects rsync prior to 3.1.3 (upstream) and various vendor advisories reference mitigation through upgrading t...
CVE-2002-0080
CVE-2002-0080 affects rsync when run in daemon mode: it does not call setgroups before dropping privileges, potentially letting local users inherit supplementary group privileges and read files they shouldn’t. The vulnerability is demonstrated across multiple advisories (Mandrake/MDKSA-2002:024, ...
CVE-2026-53784
CVE-2026-53784 affects rsync before 3.5.0. A path traversal vulnerability arises when use of chroot is disabled and the module root path (or a component) is a symlink. At session init, rsync calls chdir() to the module root without resolving symlinks (realpath or equivalent), causing subsequent r...
CVE-2026-53786
rsync before 3.5.0 contains a filter rule bypass vulnerability. Authenticated clients can bypass module-level filter restrictions by injecting malicious --filter merge file directives during filter evaluation, allowing access to files the filter would normally exclude. This is the underlying root...
CVE-2026-53802
The vulnerability CVE-2026-53802 affects rsync prior to 3.5.0. An arbitrary file read is possible by abusing symlink following in input configuration handling (including --files-from, --password-file, and filter merge files), allowing an attacker to read files accessible to the rsync daemon proce...
CVE-2026-53801
CVE-2026-53801 affects rsync versions before 3.5.0. The issue is a symlink race in the sender’s directory scanning logic that can cause the sender to enumerate and transfer files outside the module root’s intended subtree. Attackers who can create or influence symlinks in a path component of the ...
CVE-2026-53791
Technical details about CVE-2026-53791 are not publicly available in the provided documents. Monitor for updates from vendors and advisories.
CVE-2026-53789
CVE-2026-53789 affects rsync prior to 3.5.0 and describes an improper path handling vulnerability that lets a malicious sender expand the scope of --delete operations to delete files outside the intended destination subtree. The attack is carried out by a crafted file list that can cause rsync to...
CVE-2026-53803
Technical details are not publicly available in the provided documents (no concrete affected products, versions, or fixes are described). Monitor for updates.
CVE-2026-53795
CVE-2026-53795 affects rsync before 3.5.0. An arbitrary file write vulnerability arises when absolute paths are supplied to --temp-dir or --link-dest, bypassing rename-confinement and allowing attacker-controlled values to write files outside the destination tree to locations accessible to the rs...
CVE-2026-53797
CVE-2026-53797 describes a symlink race condition in rsync < 3.5.0 where the sender’s source-tree traversal can be manipulated by an attacker with access to a parent directory to cause reads of files outside the intended transfer root. The vulnerability arises from replacing a parent directory...
CVE-2026-53798
CVE-2026-53798 affects rsync before 3.5.0. A privilege-confusion in the name-converter subprocess uid/gid mapping can let a local attacker cause transferred files to be owned by root. If the name-converter returns an empty uid/gid lookup (or signals fake super-user status), rsync may treat uid/gi...
CVE-2026-53800
The CVE-2026-53800 issue affects rsync versions before 3.5.0 and concerns a symlink race in the --remove-source-files workflow. An attacker with the ability to create symlinks can time a symlink substitution for a source file between transfer completion and the unlink() call, causing rsync to del...
CVE-2026-53799
CVE-2026-53799 affects rsync before 3.5.0. A symlink race between the write to the destination and the subsequent acl_set_file() or lsetxattr() can cause arbitrary ACLs or extended attributes to be applied to unintended files by substituting a symlink at a predictable path, enabling a timing wind...