rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. NOTE: the rsync development branch has significant use beyond the rsync developers, e.g., the code has been copied for use in various GitHub projects.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSamba Rsync
APPSamba≤ 3.1.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References
Related vulnerabilities
CVE-2026-53791CRITICAL9.1same product
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote att...
CVE-2024-12084CRITICAL9.8PL ✓same product
Heap-based buffer overflow w rsync daemon — zapis poza granicami bufora sum2
CVE-2017-17434CRITICAL9.8PL ✓same product
rsync daemon: obejście kontroli dostępu przez niezweryfikowane nazwy plików
CVE-2017-16548CRITICAL9.8PL ✓same product
rsync: heap-based buffer over-read w obsłudze xattr (receive_xattr)
CVE-2026-53784HIGH8.4same product
rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside ...