CVE-2026-43617

概要

参考情報

• RsyncProject/rsync release v3.4.3 · Release Notes
• RsyncProject/rsync security advisory · Vendor Advisory
• vulncheck.com/advisories/rsync-authorization-bypass-via-hostname-resolution · Third Party Advisory

rsync のその他の脆弱性

• CVE-2026-70463高 8.1rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenizatio…
• CVE-2026-70461高 8.2rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacke…
• CVE-2026-70459中 5.3rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash…
• CVE-2026-70457高 8.2rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an ind…
• CVE-2026-70455高 7.5rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying th…