RS
Product
rsync
41
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 18Medium 11Low 2
Watch
Add rsync to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-12084 | 9.8 | Jan 15 | Rsync: heap buffer overflow in rsync due to improper checksum length handling Affected: 3.2.7; 3.3.0 |
| CVE-2017-17434 | 9.8 | Dec 6 | The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data structure (in the recv_files function in… Affected: through 3.1.2 |
| CVE-2017-16548 | 9.8 | Nov 6 | The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, which allows remote attackers to cause a… Affected: after 2.6.9 through 3.1.2 |
| CVE-2017-15994 | 9.8 | Oct 29 | rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions Affected: through 3.1.2 |
| CVE-2026-53791 | 9.1 | Aug 13 | rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header Affected: before 3.5.0 |
Showing 5