Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-10158

Опубликовано: 18 нояб. 2025
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS3: 4.3

Описание

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.

РелизСтатусПримечание
devel

released

3.4.1+ds1-7
esm-infra-legacy/trusty

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

needs-triage

jammy

needs-triage

noble

needs-triage

plucky

ignored

end of life, was needs-triage
questing

needs-triage

upstream

released

3.4.1+ds1-7

Показывать по

EPSS

Процентиль: 20%
0.00065
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
redhat
5 месяцев назад

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.

CVSS3: 4.3
nvd
5 месяцев назад

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.

CVSS3: 5.4
msrc
5 месяцев назад

Rsync: Out of bounds array access via negative index

CVSS3: 4.3
debian
5 месяцев назад

A malicious client acting as the receiver of an rsync file transfer ca ...

suse-cvrf
3 месяца назад

Security update for rsync

EPSS

Процентиль: 20%
0.00065
Низкий

4.3 Medium

CVSS3