Rsync: heap buffer overflow in rsync due to improper checksum length handling

The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data structure (in the recv_files function in…

The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a…

rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions

rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()

rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry

rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

rsync < 3.5.0 Arbitrary File Deletion via Malicious File List

Rsync < 3.4.3 Integer Overflow Information Disclosure

rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free

rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an…

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers

A flaw was found in rsync in versions since 3.2.0pre1

rsync < 3.5.0 Path Traversal via Symlink Module Root

rsync < 3.5.0 Arbitrary File Read via Symlink Following

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write

A flaw was found in rsync

rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive

rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application

Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls

rsync < 3.5.0 Symlink Race Condition Directory Traversal

Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()

rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry

rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping

Rsync < 3.4.3 Authorization Bypass via Hostname Resolution

rsync < 3.5.0 Symlink Race Condition via --remove-source-files

rsync < 3.5.0 Symlink Race Condition Information Disclosure

Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata updates before checking for a…

rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path

The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name…

rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and…

Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then…