rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()

rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry

rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

rsync < 3.5.0 Arbitrary File Deletion via Malicious File List

Rsync < 3.4.3 Integer Overflow Information Disclosure

rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free

rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion

Rsync: path traversal vulnerability in rsync

Rsync: --safe-links option bypass leads to path traversal

Rsync: info leak via uninitialized stack contents

The parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent multiple --protect-args uses, which allows remote attackers to bypass an…

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers

A flaw was found in rsync in versions since 3.2.0pre1

rsync < 3.5.0 Path Traversal via Symlink Module Root

rsync < 3.5.0 Arbitrary File Read via Symlink Following

Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write