Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-10158

Опубликовано: 18 нояб. 2025
Источник: ubuntu
Приоритет: low
CVSS3: 4.3

Описание

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.

РелизСтатусПримечание
devel

released

3.4.1+ds1-7
esm-infra-legacy/trusty

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

esm-infra/xenial

needs-triage

jammy

needs-triage

noble

needs-triage

plucky

needs-triage

questing

needs-triage

upstream

released

3.4.1+ds1-7

Показывать по

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
3 месяца назад

A malicious client acting as the receiver of an rsync file transfer can trigger an out of bounds read of a heap based buffer, via a negative array index. The malicious rsync client requires at least read access to the remote rsync module in order to trigger the issue.

CVSS3: 5.4
msrc
3 месяца назад

Rsync: Out of bounds array access via negative index

CVSS3: 4.3
debian
3 месяца назад

A malicious client acting as the receiver of an rsync file transfer ca ...

suse-cvrf
около 1 месяца назад

Security update for rsync

suse-cvrf
около 2 месяцев назад

Security update for rsync

4.3 Medium

CVSS3