Vulnerabilidades em RsyncProject

39 resultados
Análise Vexday

Rsync Project apresenta 6 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes e concentradas. Nenhuma está sob exploração ativa (KEV) e não há críticas de severidade máxima, reduzindo o risco imediato. A fraqueza predominante é leitura fora dos limites (CWE-125), típica de software legado em C, requerendo atenção em ambientes que processam dados não sanitizados.

CVE-2026-70462HIGHrsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUTEPSS 0.5%CVE-2026-53792HIGHrsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum BlockEPSS 0.5%CVE-2026-53798MEDIUMrsync < 3.5.0 Privilege Confusion via name-converter uid/gid mappingEPSS 0.4%CVE-2026-53786MEDIUMrsync < 3.5.0 Filter Rule Bypass via --filter Merge DirectiveEPSS 0.4%CVE-2026-53801HIGHrsync < 3.5.0 Symlink Race Condition Directory TraversalEPSS 0.3%CVE-2026-45232LOWRsync < 3.4.3 Off-by-One Stack Write via HTTP ProxyEPSS 0.3%CVE-2026-53788MEDIUMrsync < 3.5.0 Newline Injection via name-converter uid/gid mappingEPSS 0.3%CVE-2026-43617MEDIUMRsync < 3.4.3 Authorization Bypass via Hostname ResolutionEPSS 0.3%CVE-2026-70454HIGHrsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL ModeEPSS 0.2%CVE-2026-53802HIGHrsync < 3.5.0 Arbitrary File Read via Symlink FollowingEPSS 0.2%CVE-2026-53784HIGHrsync < 3.5.0 Path Traversal via Symlink Module RootEPSS 0.2%CVE-2026-53803HIGHrsync < 3.5.0 Symlink Following Arbitrary File OverwriteEPSS 0.2%CVE-2026-53785MEDIUMrsync < 3.5.0 Path Traversal Write Escape via --relative ModeEPSS 0.2%CVE-2026-29518HIGHRsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File WriteEPSS 0.1%CVE-2026-43619HIGHRsync < 3.4.3 Symlink Race Condition via Path-Based SyscallsEPSS 0.1%CVE-2026-53799HIGHrsync < 3.5.0 Symlink Race Condition via ACL/xattr ApplicationEPSS 0.1%CVE-2026-53797MEDIUMrsync < 3.5.0 Symlink Race Condition Information DisclosureEPSS 0.1%CVE-2026-53800MEDIUMrsync < 3.5.0 Symlink Race Condition via --remove-source-filesEPSS 0.1%CVE-2026-53796MEDIUMrsync < 3.5.0 TOCTOU Race Condition via Destination Directory HandlingEPSS 0.1%