Rsync@3.4.2 Security Vulnerabilities and Issues — Rsync@3.4.2 CVE List

SambaRsync3.4.2

5 matches found

CVE•added 2026/05/20 12:50 a.m.•91 views

CVE-2026-43618

Rsync

8.1CVSS6AI score0.0078EPSS

Save

CVE•added 2026/08/13 2:45 p.m.•53 views

CVE-2026-70455

CVE-2026-70455 concerns rsync 3.4.2 before 3.5.0. The vulnerability allows a remote sender to exhaust resources (threads/memory) by using the --zt alias for --compress-threads, which bypasses the refuse options directive’s matching on long option names. Attackers can set --zt=N with large N to sp...

8.7CVSS5.3AI score0.00566EPSS

Save

CVE•added 2026/05/20 12:47 a.m.•52 views

CVE-2026-43620

Rsync 3.4.2 and earlier are affected by a receiver-side out-of-bounds array read in recv_files() (receiver.c). The underlying cause is a mismanaged pointer array leading to an 8-byte read before the allocated array, allowing a crafted file list (with CF_INC_RECURSE enabled, first sorted entry not...

6.9CVSS5.8AI score0.00428EPSS

Save

CVE•added 2026/05/20 12:52 a.m.•47 views

CVE-2026-43617

CVE-2026-43617 affects rsync

6.3CVSS5.8AI score0.00282EPSS

Save

CVE•added 2026/05/20 12:49 a.m.•35 views

CVE-2026-43619

Rsync

7.2CVSS6AI score0.00136EPSS

Save