Vulnerabilities in RsyncProject

39 results
Vexday analysis

Rsync Project apresenta 6 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes e concentradas. Nenhuma está sob exploração ativa (KEV) e não há críticas de severidade máxima, reduzindo o risco imediato. A fraqueza predominante é leitura fora dos limites (CWE-125), típica de software legado em C, requerendo atenção em ambientes que processam dados não sanitizados.

CVE-2026-43618MEDIUMRsync < 3.4.3 Integer Overflow Information DisclosureEPSS 0.8%CVE-2026-70461HIGHrsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from EntryEPSS 0.8%CVE-2026-70464HIGHrsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake StallEPSS 0.8%CVE-2026-70455HIGHrsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread ExhaustionEPSS 0.8%CVE-2026-70453HIGHrsync < 3.5.0 Algorithmic Complexity DoS via hash_search()EPSS 0.8%CVE-2026-70459MEDIUMrsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List EntryEPSS 0.7%CVE-2026-53791CRITICALrsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol HeaderEPSS 0.7%CVE-2026-53790CRITICALrsync < 3.5.0 Command Injection via Multiple Code PathsEPSS 0.7%CVE-2026-53795HIGHrsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-destEPSS 0.6%CVE-2026-70452CRITICALrsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution FailureEPSS 0.6%CVE-2026-70460CRITICALrsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir SymlinkEPSS 0.5%CVE-2026-70458HIGHrsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED HandlingEPSS 0.5%CVE-2026-70456HIGHrsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()EPSS 0.5%CVE-2026-53789HIGHrsync < 3.5.0 Arbitrary File Deletion via Malicious File ListEPSS 0.5%CVE-2026-70457HIGHrsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()EPSS 0.5%CVE-2026-53794MEDIUMrsync < 3.5.0 Denial of Service via --max-alloc=0 Logic ErrorEPSS 0.5%CVE-2026-53783HIGHrsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsyncEPSS 0.5%CVE-2026-53793CRITICALrsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot ModeEPSS 0.5%CVE-2026-70463HIGHrsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive ParsingEPSS 0.5%CVE-2026-43620MEDIUMRsync < 3.4.3 Out-of-Bounds Array Read via recv_files()EPSS 0.5%