Known vulnerabilities in rsync (Ubuntu package)
Vendor:
Canonical Ltd.
Software:
rsync (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:rsync_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
21
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.1.0-2ubuntu0.4+esm4
3.1.1-3ubuntu1.3+esm6
3.1.2-2.1ubuntu1.6+esm4
3.1.3-8ubuntu0.9+esm2
3.2.7-0ubuntu0.22.04.7
3.2.7-1ubuntu1.5
3.4.1+ds1-5ubuntu1.3
3.4.1+ds1-7ubuntu0.3
3.1.0-2ubuntu0.4+esm3
3.1.1-3ubuntu1.3+esm5
3.1.2-2.1ubuntu1.6+esm3
3.1.3-8ubuntu0.9+esm1
3.2.7-0ubuntu0.22.04.6
3.2.7-1ubuntu1.4
3.4.1+ds1-5ubuntu1.2
3.4.1+ds1-7ubuntu0.2
3.4.1-0syncable1
3.4.1+ds1-5ubuntu1
3.4.1+ds1-5~exp1
3.4.1+ds1-4~exp1
3.4.1+ds1-4~exp2
3.4.1+ds1-4
3.4.1+ds1-2
3.4.1+ds1-1
3.3.0+ds1-4
3.3.0+ds1-3
3.3.0+ds1-2
3.3.0-1
3.3.0+ds1-1
3.2.7-1ubuntu1
3.2.7-1build3
3.2.7-1build2
3.2.7-1build1
3.2.7-1
3.2.6-1
3.2.6-2
3.2.6-3
3.2.6-4
3.2.5-1
3.2.4-1
3.2.3-8ubuntu3
3.2.3-8ubuntu3.1
3.2.3-8ubuntu2
3.2.3-5
3.2.3-6
3.2.3-7
3.2.3-8
3.2.3-8ubuntu1
3.2.3-4ubuntu2
3.2.3-4
3.2.3-4ubuntu1
3.2.3-3
3.2.3-3ubuntu1
3.2.3-2ubuntu1
3.2.3-2
3.2.3-1
3.2.3-1ubuntu1
3.2.2-1
3.2.2-2
3.2.2-2ubuntu1
3.2.1-1ubuntu2
3.2.1-1ubuntu1
3.2.1-1
3.2.0-1
3.1.3-8ubuntu0.7
3.1.3-8ubuntu0.6
3.1.3-8ubuntu0.2
3.1.3-8ubuntu0.1
3.1.0-2ubuntu0.4+esm2
3.1.0-2ubuntu0.4+esm1
3.0.9-1ubuntu1.2
3.0.9-1ubuntu1.3
3.4.1+ds1-5
3.4.1+ds1-3
3.3.0-1ubuntu0.2
3.3.0-1ubuntu0.1
3.1.3-8ubuntu0.9
3.2.7-0ubuntu0.22.04.4
3.2.7-1ubuntu1.2
Ubuntu Pro
3.1.3-8ubuntu0.8
3.2.7-0ubuntu0.22.04.3
3.2.7-1ubuntu1.1
3.1.2-2.1ubuntu1.6
3.1.3-8ubuntu0.5
3.2.7-0ubuntu0.22.04.2
3.2.7-0ubuntu0.22.10.1
3.1.3-8ubuntu0.4
3.1.2-2.1ubuntu1.5
3.1.13ubuntu1.3+esm1
3.1.3-8ubuntu0.3
3.1.2-2.1ubuntu1.4
3.1.2-2.1ubuntu1.3
3.1.2-2.1ubuntu1.2
3.1.3
3.1.2
3.1.1
3.1.0
3.0.9
3.1.2-2.1ubuntu1.1
3.1.1-3ubuntu1.3
3.1.3-7
3.1.3-8
debug
3.1.3-6
3.1.3-4
3.1.3-5
3.1.3-3
3.1.3-2
3.1.3-1
3.1.2-2ubuntu0.2
3.1.2-2ubuntu0.1
3.1.2-2.2
3.1.2-2.1ubuntu1
3.1.2-2.1
3.1.2-1ubuntu0.1
3.1.1-3ubuntu1.2
3.1.1-3ubuntu1.1
3.1.0-2ubuntu0.4
3.1.0-2ubuntu0.3
2.6.9~pre1-1
2.6.9~pre3-1
3.0.0~pre1-1
3.0.0~pre4-1
3.0.0~pre5-1
3.0.0~pre6-1
3.0.0~pre7-1
3.0.0~pre8-1
3.0.0~pre8-2
3.0.0~pre9-1
3.0.0~pre10-1
3.0.1~pre3-1
3.0.9~pre2-1
3.0.9~pre2-2
3.1.2-2
3.1.2-1
3.1.1-3ubuntu1
3.1.1-3ubuntu0.15.10.1
3.1.1-3ubuntu0.15.04.1
3.1.0-3
3.1.1-1
3.1.1-2
3.1.1-3
3.0.9-2
3.0.9-3
3.0.9-4
3.1.0-1
3.1.0-2
3.1.0-2ubuntu0.1
3.1.0-2ubuntu0.2
1.6.2-1
1.6.3-1
1.6.3-2
1.6.7-1
1.6.8-1
1.6.8-2
1.6.9-1
1.7.1-1
1.7.1-0bo1
1.7.2-1
1.7.4-1
2.0.0-1
2.0.3-1
2.0.9-1
2.0.10-1
2.0.11-1
2.0.12-1
2.0.13-1
2.0.14-1
2.0.16-1
2.0.18-1
2.0.19-1
2.1.0-1
2.1.1-1
2.2.0-1
2.2.0-2
2.2.1-1
2.3.0-1
2.3.1-1
2.3.1-2
2.3.2-1
2.3.2-1.1
2.3.2-1.2
2.4.1-1
2.4.2-1
2.4.3-1
2.4.4-1
2.4.6-1
2.5.0-0.1
2.5.0-0.2
2.5.0-0.3
2.5.1-0.1
2.5.2-0.1
2.5.4-1
2.5.5-0.1
2.5.5-0.2
2.5.6-0.1
2.5.6-1
2.5.6-2
2.5.7-1
2.5.99pre1-1
2.5.99pre2-1
2.6.0-1
2.6.0-2
2.6.0-3
2.6.1-1
2.6.2-1
2.6.2-2
2.6.2-3
2.6.2.pre3.1-1
2.6.2.pre3.2-1
2.6.3-1
2.6.3-2
2.6.4-1
2.6.4-2
2.6.4-3
2.6.4-4
2.6.4-5
2.6.4-6
2.6.5-1
2.6.6-1
2.6.7-1
2.6.7-2.6.8pre1
2.6.8-1
2.6.8-2
2.6.9-1
2.6.9-2
2.6.9-3
2.6.9-4
2.6.9-5
3.0.0-1
3.0.0-2
3.0.0-3
3.0.1-1
3.0.2-1
3.0.2-2
3.0.3-1
3.0.3-2
3.0.4-1
3.0.4-2
3.0.4-3
3.0.5-1
3.0.6-1
3.0.7-1
3.0.7-2
3.0.8-1
3.0.9-1
3.0.9-1ubuntu1
3.0.9-1ubuntu1.1
Vulnerabilities (21)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU133359 - Use After Free CVE-2026-41035 |
CWE-416 | Medium | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 04.06.2026 |
SB2026060475 SB2026060476 SB2026060477 and 21 more |
||
| #VU133144 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2026-29518 |
CWE-367 | Low | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 01.06.2026 |
SB2026060174 SB2026060175 SB2026060184 and 18 more |
||
| #VU133145 - Improper Access Control CVE-2026-43617 |
CWE-284 | Medium | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 01.06.2026 |
SB2026060174 SB2026060175 SB2026060184 and 14 more |
||
| #VU133146 - Integer overflow CVE-2026-43618 |
CWE-190 | Low | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 01.06.2026 |
SB2026060174 SB2026060175 SB2026060184 and 24 more |
||
| #VU133147 - Improper Link Resolution Before File Access ('Link Following') CVE-2026-43619 |
CWE-59 | Low | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 01.06.2026 |
SB2026060174 SB2026060175 SB2026060184 and 13 more |
||
| #VU133148 - Out-of-bounds read CVE-2026-43620 |
CWE-125 | Medium | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 01.06.2026 |
SB2026060174 SB2026060175 SB2026060184 and 18 more |
||
| #VU133149 - Off-by-one Error CVE-2026-45232 |
CWE-193 | Medium | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 01.06.2026 |
SB2026060174 SB2026060175 SB2026060184 and 20 more |
||
| #VU120348 - Out-of-bounds read CVE-2025-10158 |
CWE-125 | Medium | 3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 | 26.12.2025 |
SB2025122689 SB2025122697 SB2025122698 and 27 more |
||
| #VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-12747 |
CWE-362 | Low | Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 | 14.01.2025 |
SB2025011495 SB2025011504 SB2025011530 and 56 more |
||
| #VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-12088 |
CWE-22 | Medium | Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 | 14.01.2025 |
SB2025011495 SB2025011504 SB2025011530 and 65 more |
||
| #VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-12087 |
CWE-22 | Medium | Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 | 14.01.2025 |
SB2025011495 SB2025011504 SB2025011530 and 74 more |
||
| #VU102732 - Exposure of sensitive information to an unauthorized actor CVE-2024-12086 |
CWE-200 | Medium | Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 | 14.01.2025 |
SB2025011495 SB2025011504 SB2025011530 and 37 more |
||
| #VU102730 - Use of Uninitialized Variable CVE-2024-12085 |
CWE-457 | Medium | Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 | 14.01.2025 |
SB2025011495 SB2025011504 SB2025011530 and 92 more |
||
| #VU102729 - Heap-based Buffer Overflow CVE-2024-12084 |
CWE-122 | Critical | Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 | 14.01.2025 |
SB2025011495 SB2025011504 SB2025011530 and 25 more |
||
| #VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-29154 |
CWE-22 | Low | 3.1.2-2.1ubuntu1.6, 3.1.3-8ubuntu0.5, 3.2.7-0ubuntu0.22.04.2, 3.2.7-0ubuntu0.22.10.1 | 08.08.2022 |
SB2022080837 SB2022081645 SB2022081649 and 70 more |
||
| #VU66153 - Heap-based Buffer Overflow CVE-2022-37434 |
CWE-122 | High | 3.1.2-2.1ubuntu1.5, 3.1.3-8ubuntu0.4 | 07.08.2022 |
SB2022080705 SB2022081833 SB2022081851 and 154 more |
||
| #VU61671 - Memory corruption CVE-2018-25032 |
CWE-119 | Medium | 3.1.2-2.1ubuntu1.4, 3.1.3-8ubuntu0.3, 3.1.13ubuntu1.3+esm1 | 28.03.2022 |
SB2022032844 SB2022032845 SB2022033018 and 192 more |
||
| #VU6664 - Out-of-bounds read CVE-2016-9841 |
CWE-125 | Low | 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1.1 | 24.05.2017 |
SB2017052312 SB2017052405 SB2017052406 and 34 more |
||
| #VU6665 - Improper input validation CVE-2016-9842 |
CWE-20 | Low | 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1.1 | 24.05.2017 |
SB2017052312 SB2017052405 SB2017052406 and 23 more |
||
| #VU6666 - Out-of-bounds read CVE-2016-9843 |
CWE-125 | Low | 3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1.1 | 24.05.2017 |
SB2017052312 SB2017052405 SB2017052406 and 29 more |
Showing elements 1 - 20 out of 21