Known vulnerabilities in rsync (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:rsync_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 21
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rsync (Ubuntu package) rsync (Ubuntu package) is affected by 21 known vulnerabilities: 1 critical, 1 high, 10 medium, 9 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133359 - Use After Free
CVE-2026-41035
CWE-416 Medium
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 04.06.2026 SB2026060475
SB2026060476
SB2026060477
and 21 more
#VU133144 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-29518
CWE-367 Low
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133145 - Improper Access Control
CVE-2026-43617
CWE-284 Medium
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 14 more
#VU133146 - Integer overflow
CVE-2026-43618
CWE-190 Low
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 24 more
#VU133147 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-43619
CWE-59 Low
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 13 more
#VU133148 - Out-of-bounds read
CVE-2026-43620
CWE-125 Medium
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133149 - Off-by-one Error
CVE-2026-45232
CWE-193 Medium
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 20 more
#VU120348 - Out-of-bounds read
CVE-2025-10158
CWE-125 Medium
No
No
3.1.0-2ubuntu0.4+esm3, 3.1.0-2ubuntu0.4+esm4, 3.1.1-3ubuntu1.3+esm5, 3.1.1-3ubuntu1.3+esm6, 3.1.2-2.1ubuntu1.6+esm3, 3.1.2-2.1ubuntu1.6+esm4, 3.1.3-8ubuntu0.9+esm1, 3.1.3-8ubuntu0.9+esm2, 3.2.7-0ubuntu0.22.04.6, 3.2.7-0ubuntu0.22.04.7, 3.2.7-1ubuntu1.4, 3.2.7-1ubuntu1.5, 3.4.1+ds1-7ubuntu0.2, 3.4.1+ds1-7ubuntu0.3, 3.4.1+ds1-5ubuntu1.2, 3.4.1+ds1-5ubuntu1.3 26.12.2025 SB2025122689
SB2025122697
SB2025122698
and 27 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747
CWE-362 Low
No
No
Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088
CWE-22 Medium
No
No
Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087
CWE-22 Medium
No
No
Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086
CWE-200 Medium
No
No
Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU102729 - Heap-based Buffer Overflow
CVE-2024-12084
CWE-122 Critical
Available
No
Ubuntu Pro, 3.1.3-8ubuntu0.8, 3.1.3-8ubuntu0.9, 3.2.7-0ubuntu0.22.04.3, 3.2.7-0ubuntu0.22.04.4, 3.2.7-1ubuntu1.1, 3.2.7-1ubuntu1.2, 3.3.0-1ubuntu0.1, 3.3.0-1ubuntu0.2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 25 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154
CWE-22 Low
No
No
3.1.2-2.1ubuntu1.6, 3.1.3-8ubuntu0.5, 3.2.7-0ubuntu0.22.04.2, 3.2.7-0ubuntu0.22.10.1 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434
CWE-122 High
Available
No
3.1.2-2.1ubuntu1.5, 3.1.3-8ubuntu0.4 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU61671 - Memory corruption
CVE-2018-25032
CWE-119 Medium
No
No
3.1.2-2.1ubuntu1.4, 3.1.3-8ubuntu0.3, 3.1.13ubuntu1.3+esm1 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU6664 - Out-of-bounds read
CVE-2016-9841
CWE-125 Low
No
No
3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1.1 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 34 more
#VU6665 - Improper input validation
CVE-2016-9842
CWE-20 Low
No
No
3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1.1 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 23 more
#VU6666 - Out-of-bounds read
CVE-2016-9843
CWE-125 Low
No
No
3.1.1-3ubuntu1.3, 3.1.2-2.1ubuntu1.1 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 29 more


Showing elements 1 - 20 out of 21