Known vulnerabilities in net-misc/rsync

Vendor: Gentoo
Software CPE: cpe:2.3:o:gentoo:net-misc_rsync:*:*:*:*:*:gentoo_linux:*:*
Website:
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting net-misc/rsync net-misc/rsync is affected by 13 known vulnerabilities: 1 critical, 8 medium, 4 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU133359 - Use After Free
CVE-2026-41035
CWE-416 Medium
No
No
3.4.3 04.06.2026 SB2026060475
SB2026060476
SB2026060477
and 21 more
#VU133144 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-29518
CWE-367 Low
No
No
3.4.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133145 - Improper Access Control
CVE-2026-43617
CWE-284 Medium
No
No
3.4.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 14 more
#VU133146 - Integer overflow
CVE-2026-43618
CWE-190 Low
No
No
3.4.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 24 more
#VU133147 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-43619
CWE-59 Low
No
No
3.4.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 13 more
#VU133148 - Out-of-bounds read
CVE-2026-43620
CWE-125 Medium
No
No
3.4.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133149 - Off-by-one Error
CVE-2026-45232
CWE-193 Medium
No
No
3.4.3 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 20 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747
CWE-362 Low
No
No
3.3.0-r2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088
CWE-22 Medium
No
No
3.3.0-r2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087
CWE-22 Medium
No
No
3.3.0-r2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086
CWE-200 Medium
No
No
3.3.0-r2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
3.3.0-r2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU102729 - Heap-based Buffer Overflow
CVE-2024-12084
CWE-122 Critical
Available
No
3.3.0-r2 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 25 more