rsync
Samba- Software type
- —
- Catalog vulnerabilities
- 41
Severity across 1 analyzed records
Verify to analyze this security profile
A short verification protects source data and prevents automated AI requests.
en
Severity across 1 analyzed records
A short verification protects source data and prevents automated AI requests.
As of 09/11/2026, within CyStack's analyzed data, rsync has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of rsync and determine which vulnerabilities affect that version.
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-70455rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-70457rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-70459rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityMedium |
CVE-2026-70461rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-70463rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-53801rsync < 3.5.0 Symlink Race Condition Directory Traversal | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-53800rsync < 3.5.0 Symlink Race Condition via --remove-source-files | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityMedium |
CVE-2026-53799rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-53797rsync < 3.5.0 Symlink Race Condition Information Disclosure | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityMedium |
CVE-2026-53795rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-53791rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityCritical |
CVE-2026-53789rsync < 3.5.0 Arbitrary File Deletion via Malicious File List | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-53798rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityMedium |
CVE-2026-53786rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityMedium |
CVE-2026-53784rsync < 3.5.0 Path Traversal via Symlink Module Root | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-53803rsync < 3.5.0 Symlink Following Arbitrary File Overwrite | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-53802rsync < 3.5.0 Arbitrary File Read via Symlink Following | Exploitation statusNot known exploited | FixYes | Published08/13/2026 | SeverityHigh |
CVE-2026-29518Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write | Exploitation statusNot known exploited | FixYes | Published05/20/2026 | SeverityHigh |
CVE-2026-43617Rsync < 3.4.3 Authorization Bypass via Hostname Resolution | Exploitation statusNot known exploited | FixYes | Published05/20/2026 | SeverityMedium |
CVE-2026-43618Rsync < 3.4.3 Integer Overflow Information Disclosure | Exploitation statusNot known exploited | FixYes | Published05/20/2026 | SeverityMedium |
CVE-2026-43619Rsync < 3.4.3 Symlink Race Condition via Path-Based Syscalls | Exploitation statusNot known exploited | FixYes | Published05/20/2026 | SeverityHigh |
CVE-2026-43620Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files() | Exploitation statusNot known exploited | FixYes | Published05/20/2026 | SeverityMedium |
CVE-2026-45232Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | Exploitation statusNot known exploited | FixYes | Published05/20/2026 | SeverityLow |
CVE-2026-41035CVE-2026-41035 | Exploitation statusNot known exploited | FixNot confirmed | Published04/16/2026 | SeverityHigh |
CVE-2024-12084Rsync: heap buffer overflow in rsync due to improper checksum length handling | Exploitation statusPublic exploit | FixNot confirmed | Published01/15/2025 | SeverityCritical |
CVE-2024-12087Rsync: path traversal vulnerability in rsync | Exploitation statusPublic exploit | FixYes | Published01/14/2025 | SeverityMedium |
CVE-2024-12088Rsync: --safe-links option bypass leads to path traversal | Exploitation statusPublic exploit | FixYes | Published01/14/2025 | SeverityMedium |
CVE-2024-12086Rsync: rsync server leaks arbitrary client files | Exploitation statusPublic exploit | FixYes | Published01/14/2025 | SeverityMedium |
CVE-2024-12085Rsync: info leak via uninitialized stack contents | Exploitation statusPublic exploit | FixYes | Published01/14/2025 | SeverityHigh |
CVE-2022-29154CVE-2022-29154 | Exploitation statusNot confirmed | FixNot confirmed | Published08/02/2022 | SeverityUnknown |
CVE-2020-14387CVE-2020-14387 | Exploitation statusNot confirmed | FixNot confirmed | Published05/27/2021 | SeverityUnknown |
CVE-2018-5764CVE-2018-5764 | Exploitation statusNot confirmed | FixNot confirmed | Published01/17/2018 | SeverityUnknown |
CVE-2017-17433CVE-2017-17433 | Exploitation statusNot confirmed | FixNot confirmed | Published12/06/2017 | SeverityUnknown |
CVE-2017-17434CVE-2017-17434 | Exploitation statusNot confirmed | FixNot confirmed | Published12/06/2017 | SeverityUnknown |
CVE-2017-16548CVE-2017-16548 | Exploitation statusNot confirmed | FixNot confirmed | Published11/06/2017 | SeverityUnknown |
CVE-2017-15994CVE-2017-15994 | Exploitation statusNot confirmed | FixNot confirmed | Published10/29/2017 | SeverityUnknown |
CVE-2014-9512CVE-2014-9512 | Exploitation statusNot confirmed | FixNot confirmed | Published02/12/2015 | SeverityUnknown |
CVE-2014-2855CVE-2014-2855 | Exploitation statusNot confirmed | FixNot confirmed | Published04/23/2014 | SeverityUnknown |
CVE-2011-1097CVE-2011-1097 | Exploitation statusNot confirmed | FixNot confirmed | Published03/30/2011 | SeverityUnknown |
CVE-2008-1720CVE-2008-1720 | Exploitation statusNot confirmed | FixNot confirmed | Published04/10/2008 | SeverityUnknown |
CVE-2002-0080CVE-2002-0080 | Exploitation statusNot confirmed | FixNot confirmed | Published06/25/2002 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan