Skip to content
OpenAdvisories

Product · RsyncProject

rsync

40 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header

    rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly…