Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-70458

Опубликовано: 23 авг. 2026
Источник: msrc
CVSS3: 8.2
EPSS Низкий

Описание

rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling

EPSS

Процентиль: 34%
0.00396
Низкий

8.2 High

CVSS3

Связанные уязвимости

CVSS3: 8.2
ubuntu
3 месяца назад

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing F_SUM field in the file_struct layout to access memory past the end of the allocated structure, corrupting adjacent heap or stack data.

CVSS3: 8.2
redhat
3 месяца назад

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing F_SUM field in the file_struct layout to access memory past the end of the allocated structure, corrupting adjacent heap or stack data.

CVSS3: 8.2
nvd
3 месяца назад

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing F_SUM field in the file_struct layout to access memory past the end of the allocated structure, corrupting adjacent heap or stack data.

CVSS3: 8.2
debian
3 месяца назад

rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability ...

CVSS3: 8.2
fstec
3 месяца назад

Уязвимость модуля HLINK_BUMP утилиты для передачи и синхронизации файлов Rsync, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 34%
0.00396
Низкий

8.2 High

CVSS3