Skip to content
OpenAdvisories

Package · Debian

rsync

70 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-70463 Public exploit

    rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing

    rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name co…

    RsyncProject rsync rsync rsync Debian Ubuntu Alpine
  • High 7.5
    CVE-2024-12085 Public exploit

    Rsync: info leak via uninitialized stack contents

    A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitializ…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Alpine