Known vulnerabilities in Rsync - page 3

Vendor: Samba
Software: Rsync
Software CPE: cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Rsync Rsync is affected by 55 known vulnerabilities: 1 critical, 7 high, 31 medium, 16 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120348 - Out-of-bounds read
CVE-2025-10158
CWE-125 Medium
No
No
- 26.12.2025 SB2025122689
SB2025122697
SB2025122698
and 27 more
#VU102739 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-12747
CWE-362 Low
No
No
3.4.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 56 more
#VU102736 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12088
CWE-22 Medium
No
No
3.4.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 65 more
#VU102734 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-12087
CWE-22 Medium
No
No
3.4.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 74 more
#VU102732 - Exposure of sensitive information to an unauthorized actor
CVE-2024-12086
CWE-200 Medium
No
No
3.4.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 37 more
#VU102730 - Use of Uninitialized Variable
CVE-2024-12085
CWE-457 Medium
No
No
3.4.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 92 more
#VU102729 - Heap-based Buffer Overflow
CVE-2024-12084
CWE-122 Critical
Available
No
3.4.0 14.01.2025 SB2025011495
SB2025011504
SB2025011530
and 25 more
#VU66189 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-29154
CWE-22 Low
No
No
3.2.5pre1 08.08.2022 SB2022080837
SB2022081645
SB2022081649
and 70 more
#VU49239 - Improper Validation of Certificate with Host Mismatch
CVE-2020-14387
CWE-297 Medium
No
No
3.2.4 04.01.2021 SB2021010413
SB2021010414
SB20240620122
and 2 more
#VU10307 - Improper input validation
CVE-2018-5764
CWE-20 Low
No
No
- 25.01.2018 SB2018012903
SB2018012316
SB2018012317
and 10 more
#VU9609 - Improper Access Control
CVE-2017-17434
CWE-284 Low
No
No
- 11.12.2017 SB2017110311
SB2017120714
SB2017120715
and 4 more
#VU9608 - Improper Access Control
CVE-2017-17433
CWE-284 Low
No
No
- 11.12.2017 SB2017110311
SB2017120714
SB2017120715
and 4 more
#VU40896 - Improper Link Resolution Before File Access ('Link Following')
CVE-2014-9512
CWE-59 Medium
No
No
- 12.02.2015 SB2015021206
#VU41760 - Improper input validation
CVE-2014-2855
CWE-20 Medium
No
No
- 23.04.2014 SB2014042305
#VU45154 - Memory corruption
CVE-2011-1097
CWE-119 Medium
No
No
- 31.03.2011 SB2011033102


Showing elements 41 - 60 out of 55