Known Vulnerabilities for Rsync by RsyncProject
Listed below are 10 of the newest known vulnerabilities associated with "Rsync" by "RsyncProject".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49233 json | Routinator does not properly check the module component of rsync URIs, which are used to create the file system paths for the... | Not Provided | 2026-06-08 | 2026-06-08 |
| CVE-2026-48163 json | MariaDB server is a community developed fork of MySQL server. From versions 10.6.1 to before 10.6.27, 10.11.1 to before 10.11... | Not Provided | 2026-06-12 | 2026-06-16 |
| CVE-2026-45232 json | Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection()... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-43620 json | Rsync version 3.4.2 and prior contain a receiver-side out-of-bounds array read vulnerability in recv_files() in receiver.c t... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-43619 json | Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod, lch... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-43618 json | Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signe... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-43617 json | Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access cont... | Not Provided | 2026-05-20 | 2026-05-20 |
| CVE-2026-41035 json | In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver us... | Not Provided | 2026-04-16 | 2026-04-22 |
| CVE-2026-29518 json | Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allow... | Not Provided | 2026-05-20 | 2026-05-26 |
| CVE-2024-12747 json | A flaw was found in rsync. This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's... | Not Provided | 2025-01-14 | 2026-04-14 |