Known vulnerabilities in rsync-daemon

Vendor: OpenAnolis
Software: rsync-daemon
Software CPE: cpe:2.3:o:openanolis:rsync-daemon:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 32
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting rsync-daemon rsync-daemon is affected by 32 known vulnerabilities: 6 high, 17 medium, 9 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142296 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53783		 CWE-59 Medium
No
No
 3.1.3-28.0.1 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 9 more
#VU142295 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53784		 CWE-59 Low
No
No
 3.1.3-28.0.1 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 9 more
#VU142294 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-53785		 CWE-59 Low
No
No
 3.1.3-28.0.1 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 9 more
#VU142277 - Incorrect Authorization
CVE-2026-70463		 CWE-863 Medium
No
No
 3.1.3-28.0.1, 3.5.0-1 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 10 more
#VU142276 - Integer overflow
CVE-2026-70462		 CWE-190 Medium
No
No
 3.5.0-1 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 7 more
#VU142272 - Out-of-bounds write
CVE-2026-70458		 CWE-787 High
No
No
 3.1.3-28.0.1, 3.5.0-1 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 10 more
#VU142268 - Improper Certificate Validation
CVE-2026-70454		 CWE-295 Medium
No
No
 3.5.0-1 13.08.2026 SB2026081362
SB2026081821
SB2026082074
and 8 more
#VU133359 - Use After Free
CVE-2026-41035		 CWE-416 Medium
No
No
 3.1.3-25.0.1 04.06.2026 SB2026060475
SB2026060476
SB2026060477
and 25 more
#VU133144 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-29518		 CWE-367 Low
No
No
 3.1.3-27.0.1 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 18 more
#VU133146 - Integer overflow
CVE-2026-43618		 CWE-190 Low
No
No
 3.1.3-27.0.1 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 24 more
#VU133149 - Off-by-one Error
CVE-2026-45232		 CWE-193 Medium
No
No
 3.4.3-1 01.06.2026 SB2026060174
SB2026060175
SB2026060184
and 20 more
#VU120348 - Out-of-bounds read
CVE-2025-10158		 CWE-125 Medium
No
No
 3.1.3-24.0.1, 3.4.1-2 26.12.2025 SB2025122689
SB2025122697
SB2025122698
and 27 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747		 CWE-362 Low
No
No
 3.1.3-21.0.1, 3.4.1-1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088		 CWE-22 Medium
No
No
 3.1.3-21.0.1, 3.4.1-1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087		 CWE-22 Medium
No
No
 3.1.3-21.0.1, 3.4.1-1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086		 CWE-200 Medium
No
No
 3.4.1-1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085		 CWE-457 Medium
No
No
 3.1.3-20.0.1 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154		 CWE-22 Low
No
No
 3.1.3-14 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU61671 - Memory corruption
CVE-2018-25032		 CWE-119 Medium
No
No
 3.1.3-14 28.03.2022 SB2022032844
SB2022032845
SB2022033018
and 192 more
#VU6663 - Out-of-bounds read
CVE-2016-9840		 CWE-125 Low
No
No
 3.1.3-23.0.1 24.05.2017 SB2017052312
SB2017052405
SB2017052406
and 47 more


Showing elements 1 - 20 out of 32