SB2026081362 - Multiple vulnerabilities in Rsync

Security Bulletin ID SB2026081362

CSH Severity

High

Patch available

YES

Number of vulnerabilities 33

Exploitation vector Remote access

Highest impact Data manipulation

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 33 vulnerabilities.

1) Improper Neutralization of Special Elements in Output Used by a Downstream Component (CVE-ID: CVE-2026-53788)

CWE-ID: CWE-74 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to inject requests into a persistent helper protocol and disclose sensitive information or modify data.

The vulnerability exists due to improper neutralization of special elements in output used by a downstream component in the name-converter helper when writing peer-controlled names into its persistent line protocol. A remote attacker can supply a name containing a newline or carriage return to inject requests into that channel to disclose sensitive information or modify data.

2) Time-of-check Time-of-use (TOCTOU) Race Condition (CVE-ID: CVE-2026-53796)

CWE-ID: CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

CVSSv4: 5.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to overwrite files outside the destination tree.

The vulnerability exists due to a time-of-check time-of-use race condition in the non-daemon receiver destination chdir handling when processing an operator-named destination directory. A local user can race the destination path from a directory to a symlink pointing outside the destination tree to overwrite files outside the destination tree.

This issue affects non-daemon receiver operation and can lead to local privilege escalation in scenarios such as privileged scheduled rsync runs over an attacker-controlled destination component.

3) Link following (CVE-ID: CVE-2026-53795)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to overwrite files outside the destination tree.

The vulnerability exists due to improper link resolution before file access in do_rename_at()/do_link_at() when handling transfers that use an absolute --temp-dir, an absolute --link-dest basis, or mixed-parent rename/link paths. A remote attacker can flip a destination parent component from a directory to a symlink mid-transfer to overwrite files outside the destination tree.

User interaction is required to initiate the transfer.

4) Input validation error (CVE-ID: CVE-2026-53794)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to improper input validation in the max-alloc option handling when processing rsync protocol options from a remote peer. A remote attacker can send a max-alloc value of 0 to disable the per-allocation sanity cap and cause a denial of service.

An older or modified client can forward the zero value on the wire to an unpatched daemon, which honors it.

5) Link following (CVE-ID: CVE-2026-53793)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information and modify files outside the intended inner module.

The vulnerability exists due to improper link resolution before file access in rsync inner-module path handling when processing a chrooted \"/./\" inner module with a parent-component symlink or a peer-forged delta-basis path. A remote attacker can supply crafted path components to access files outside the inner module to disclose sensitive information and modify files outside the intended inner module.

The issue occurs when use chroot = yes is enabled with a \"/./\" inner module, and it also affects peer-controlled delta-basis names during client pull operations with --link-dest, --copy-dest, --compare-dest, or --fuzzy.

6) Improper Validation of Array Index (CVE-ID: CVE-2026-53792)

CWE-ID: CWE-129 - Improper Validation of Array Index

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to improper validation of array index in the sender matching logic when processing a receiver-supplied checksum header. A remote attacker can send a checksum header with a non-zero count and zero block length to cause a denial of service.

User interaction is required to initiate the transfer.

7) Authentication Bypass by Spoofing (CVE-ID: CVE-2026-53791)

CWE-ID: CWE-290 - Authentication Bypass by Spoofing

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass host-based access control and spoof the daemon\'s source address.

The vulnerability exists due to authentication bypass by spoofing in PROXY-protocol mode when handling a direct client connection with a supplied PROXY header. A remote attacker can send a forged PROXY header to bypass host-based access control and spoof the daemon\'s source address.

The issue occurs when proxy protocol = true is enabled and the client connects directly rather than through a trusted proxy.

8) OS Command Injection (CVE-ID: CVE-2026-53790)

CWE-ID: CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSSv4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to execute arbitrary commands.

The vulnerability exists due to improper neutralization of special elements in shell commands and command arguments in rsync command construction and helper invocation when processing peer- or host-controlled values. A remote attacker can supply specially crafted host, environment, hostspec, or remote path values to execute arbitrary commands.

The issue affects multiple injection sinks, including RSYNC_CONNECT_PROG host substitution, daemon exec hook expansion, rsync-ssl helper invocation, and remote-shell argument quoting for newline or carriage return characters.

9) Input validation error (CVE-ID: CVE-2026-53789)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to improper input validation in the rsync receiver file-list handling when processing file-list entries from a malicious sender under --delete or --force. A remote attacker can send crafted transfer-root or implied-parent entries to cause a denial of service.

User interaction is required to initiate a transfer from a malicious sender.

10) Link following (CVE-ID: CVE-2026-53797)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information.

The vulnerability exists due to improper link resolution before file access in the sender file-content opening logic when processing transferred files by path after the file-list scan. A local user can race a parent directory from a real directory to a symlink pointing outside the source tree to disclose sensitive information.

This issue affects local or non-daemon sender operation and requires winning a race condition after the file-list scan.

11) Input validation error (CVE-ID: CVE-2026-53798)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to modify file ownership metadata.

The vulnerability exists due to improper input validation in the rsync daemon name-converter handling logic when processing an empty converter response for an unknown sender name. A remote attacker can provide an unknown name that causes an empty response to be treated as success and mapped to uid/gid 0 to modify file ownership metadata.

Only configurations with fake super = yes are affected.

12) Improper access control (CVE-ID: CVE-2026-53786)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass file filtering restrictions and disclose sensitive information or modify data.

The vulnerability exists due to improper access control in the daemon filter check for client-supplied merge-file filters when processing a client-supplied merge-file filter via --remote-option. A remote attacker can supply a specially crafted merge-file filter path to bypass file filtering restrictions and disclose sensitive information or modify data.

The issue occurs because the merge-file filter was checked against a module-prefixed absolute path, causing daemon rules anchored at the module root to fail to match and allowing server-side merge-file rules from a forbidden file to be applied.

13) Link following (CVE-ID: CVE-2026-53785)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 6.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to create files and directories outside the destination tree.

The vulnerability exists due to improper link resolution before file access in make_path() when re-creating implied parent directories under --relative transfers. A local user can plant a symlink in a parent path component to create files and directories outside the destination tree.

The issue occurs on the receiver side while handling transferred paths with implied parent directories.

14) Link following (CVE-ID: CVE-2026-53784)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information and modify served content outside the configured module root.

The vulnerability exists due to improper link resolution before file access in the daemon module-root chdir logic when changing directory into the module path with use chroot = no. A local user can place a parent-component symlink to make the daemon serve files from outside the configured module root to disclose sensitive information and modify served content outside the configured module root.

Exploitation requires the daemon to be configured with use chroot = no, and the issue occurs before any transfer begins.

15) Link following (CVE-ID: CVE-2026-53783)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to disclose sensitive information and modify files outside the restricted directory.

The vulnerability exists due to improper link resolution before file access and unsafe option allowlisting in the rrsync SSH forced-command wrapper when handling rsync arguments and options in a restricted directory. A remote user can replace a validated path component with a symlink or use dangerous allowed options to disclose sensitive information and modify files outside the restricted directory.

The issue affects restricted non-root directory configurations and does not require user interaction.

16) Link following (CVE-ID: CVE-2026-53803)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to overwrite arbitrary files and escalate privileges.

The vulnerability exists due to improper link resolution before file access in rsync output and ancillary file path handling when opening operator-supplied paths such as --log-file, --write-batch, --read-batch, and daemon ancillary files. A local user can plant a symlink in the target path or a parent path component to overwrite arbitrary files and escalate privileges.

For --read-batch, a planted symlink, FIFO, or device can supply chosen bytes to the protocol parser.

17) UNIX symbolic link following (CVE-ID: CVE-2026-53802)

CWE-ID: CWE-61 - UNIX Symbolic Link (Symlink) Following

CVSSv4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to disclose sensitive information and manipulate file transfer behavior.

The vulnerability exists due to improper link resolution before file access in operator-supplied input file handling when processing paths for filter merge files, files-from lists, include-from and exclude-from lists, password files, secrets files, and daemon files-from inputs. A local user can plant a symlink in a controlled path component to disclose sensitive information and manipulate file transfer behavior.

In the password-file and secrets-file cases, file contents may be sent as the daemon authentication response. The daemon files-from variant can read a file outside the served module.

18) Not Failing Securely ('Failing Open') (CVE-ID: CVE-2026-70452)

CWE-ID: CWE-636 - Not Failing Securely (\'Failing Open\')

CVSSv4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to bypass host-based access restrictions and gain unauthorized access.

The vulnerability exists due to not failing securely in hosts deny access control processing when performing a forward DNS lookup of a configured hostname token. A remote attacker can connect from a host that should be denied to bypass host-based access restrictions and gain unauthorized access.

The issue occurs when forward lookup is enabled and a hostname token in hosts deny cannot be resolved, including during transient resolver failures or when a global daemon chroot lacks resolver configuration.

19) Link following (CVE-ID: CVE-2026-53799)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 7.2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to escalate privileges.

The vulnerability exists due to improper link resolution before file access in the receiver ACL/xattr metadata apply logic when preserving metadata and applying received ACLs or xattrs by path. A local user can race a path component into a symlink to cause rsync to apply attacker-controlled ACL data to a victim inode outside the destination tree to escalate privileges.

A local user who controls a path component can exploit the issue after the receiver creates the entry but before the metadata apply. A raced FIFO could also block the metadata apply.

20) Link following (CVE-ID: CVE-2026-53800)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper link resolution before file access in successful_send() when unlinking source files with --remove-source-files after a parent directory is raced from a real directory to a symlink outside the source tree. A local user can replace an attacker-controlled parent directory with a symlink to redirect the post-send unlink and cause a denial of service.

The issue is reachable when a higher-authority local sender operates on a tree containing an attacker-controlled component, and it may also be reachable through a daemon module if --remove-source-files is allowed.

21) Link following (CVE-ID: CVE-2026-53801)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to improper link resolution before file access in the sender and daemon directory-scan logic when enumerating source directories. A remote attacker can manipulate a symlinked directory path to disclose sensitive information.

In non-daemon mode, exploitation relies on a race that swaps a parent path component to a symlink outside the transfer root between the file-list scan and the recursive directory open. In daemon symlink-following mode, an in-module symlinked directory pointing outside the served module can be enumerated, exposing entry names, metadata, and preserved symlink targets but not out-of-module file contents.

22) Resource exhaustion (CVE-ID: CVE-2026-70464)

CWE-ID: CWE-400 - Resource exhaustion

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to uncontrolled resource consumption in the rsync daemon handshake handling when processing pre-transfer handshake input. A remote attacker can stall the connection by sending an unterminated line or trickling NUL-terminated arguments one byte at a time to cause a denial of service.

A stall after module selection can hold a max-connections slot and make the module unavailable to legitimate clients.

23) Incorrect authorization (CVE-ID: CVE-2026-70463)

CWE-ID: CWE-863 - Incorrect Authorization

CVSSv4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to gain unauthorized read or write access.

The vulnerability exists due to incorrect authorization in auth_server() `auth users` parsing when processing `rsyncd.conf` `auth users` values that begin with a comma. A remote user can authenticate as a member of a group that an administrator intended to deny or restrict to read-only to gain unauthorized read or write access.

The issue is silent because the configuration parses without error and a later first-match `:rw` entry can be applied instead of the intended group deny or read-only rule.

24) Integer overflow (CVE-ID: CVE-2026-70462)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to integer overflow in MSG_IO_TIMEOUT handling when processing a peer-supplied MSG_IO_TIMEOUT message. A remote attacker can send a specially crafted timeout value to cause a denial of service.

User interaction is required because MSG_IO_TIMEOUT is accepted only by the connecting client.

25) Out-of-bounds write (CVE-ID: CVE-2026-70461)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds write in add_implied_include() when processing transfer arguments sent by a peer. A remote attacker can send a specially crafted files-from entry to cause a denial of service.

The issue is reachable on a standard network rsync daemon with a read-only module, and no crafted protocol is required.

26) Link following (CVE-ID: CVE-2026-70460)

CWE-ID: CWE-59 - Improper Link Resolution Before File Access ('Link Following')

CVSSv4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to read files or overwrite, rename, or unlink files outside the module root.

The vulnerability exists due to improper link resolution before file access in the rsync daemon module path resolver when processing peer-supplied --partial-dir or --backup-dir values that resolve through an in-module symlink. A remote attacker can supply a crafted directory value to read files or overwrite, rename, or unlink files outside the module root.

Exploitation requires a trusted in-module symlink owned by uid 0 or the daemon effective uid to already exist along the resolved path, and reach is limited to locations accessible through that symlink by the daemon effective uid.

27) Access of Uninitialized Pointer (CVE-ID: CVE-2026-70459)

CWE-ID: CWE-824 - Access of Uninitialized Pointer

CVSSv4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to access of an uninitialized pointer in recv_file_list() and generate_files() when processing a crafted first incremental file list with a non-directory transfer root. A remote attacker can send a specially crafted file list to cause a denial of service.

The issue affects the per-connection daemon child, and the crash occurs before any transfer phase.

28) Out-of-bounds write (CVE-ID: CVE-2026-70458)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service and modify data.

The vulnerability exists due to out-of-bounds write in the rsync file list handling logic when processing a file entry marked FLAG_HLINKED even though hard links were not negotiated. A remote attacker can send a specially crafted file entry to cause a denial of service and modify data.

Exploitation requires protocol-30 incremental recursion, a regular file entry, and use of --checksum with hard links disabled.

29) Out-of-bounds write (CVE-ID: CVE-2026-70457)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service and modify memory.

The vulnerability exists due to an out-of-bounds write in parse_size_arg() when processing oversized size-related option values forwarded through server_options(). A remote attacker can send specially crafted --max-size, --min-size, --max-alloc, --bwlimit, or --block-size values to cause a denial of service and modify memory.

The issue results in a fixed two-byte write of newline and NUL at an attacker-chosen offset in .bss.

30) Out-of-bounds write (CVE-ID: CVE-2026-70456)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 8.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service or modify memory.

The vulnerability exists due to out-of-bounds write in read_args() when processing daemon client arguments that make glob expansion land the argument count exactly on maxargs. A remote attacker can send a specially crafted request to cause a denial of service or modify memory.

The write occurs when a trailing NULL pointer is written one pointer past the end of the heap allocation.

31) Allocation of Resources Without Limits or Throttling (CVE-ID: CVE-2026-70455)

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to allocation of resources without limits or throttling in the rsync daemon sender when processing a PULL request with a large --compress-threads value. A remote attacker can send a request that names a large worker count to cause a denial of service.

A stock client is sufficient, and no crafted protocol is required. On anonymous modules, no authentication is required.

32) Improper Certificate Validation (CVE-ID: CVE-2026-70454)

CWE-ID: CWE-295 - Improper Certificate Validation

CVSSv4: 7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to disclose sensitive information and tamper with transmitted data.

The vulnerability exists due to improper certificate validation in the rsync-ssl helper script when establishing TLS connections to an rsync daemon through affected backends. A remote attacker can perform a machine-in-the-middle attack using a certificate that is not properly verified to disclose sensitive information and tamper with transmitted data.

User interaction is required because a user must invoke rsync-ssl.

33) Inefficient Algorithmic Complexity (CVE-ID: CVE-2026-70453)

CWE-ID: CWE-407 - Inefficient Algorithmic Complexity

CVSSv4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to inefficient algorithmic complexity in hash_search() when processing a crafted checksum set containing a long chain of equal weak checksums. A remote attacker can send a specially crafted checksum set to cause a denial of service.

Sustained CPU consumption can persist as shared host resource exhaustion rather than being limited to the attacker\'s own transfer.

Remediation

Install update from vendor's website.

SB2026081362 - Multiple vulnerabilities in Rsync

Breakdown by Severity

Description

Remediation

References

Please verify you're human