# Rsync


- [CVE-2024-12084](https://insights.sbomify.com/CVE-2024-12084/): Rsync: heap buffer overflow in rsync due to improper checksum length handling (critical 9.8)
- [CVE-2017-17434](https://insights.sbomify.com/CVE-2017-17434/): The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data str (critical 9.8)
- [CVE-2017-16548](https://insights.sbomify.com/CVE-2017-16548/): The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing '\0' character in an xattr name, w (critical 9.8)
- [CVE-2017-15994](https://insights.sbomify.com/CVE-2017-15994/): rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions. (critical 9.8)
- [CVE-2026-53790](https://insights.sbomify.com/CVE-2026-53790/): rsync < 3.5.0 Command Injection via Multiple Code Paths (critical 9.2)
- [CVE-2026-70460](https://insights.sbomify.com/CVE-2026-70460/): rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink (critical 9.2)
- [CVE-2026-53791](https://insights.sbomify.com/CVE-2026-53791/): rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header (critical 9.1)
- [CVE-2026-53793](https://insights.sbomify.com/CVE-2026-53793/): rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode (critical 9.1)
- [CVE-2026-70452](https://insights.sbomify.com/CVE-2026-70452/): rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure (critical 9.1)
- [CVE-2026-70456](https://insights.sbomify.com/CVE-2026-70456/): rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() (high 8.8)
- [CVE-2026-70458](https://insights.sbomify.com/CVE-2026-70458/): rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling (high 8.8)
- [CVE-2026-70461](https://insights.sbomify.com/CVE-2026-70461/): rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/samba/rsync/