Поиск уязвимостей
Количество 17
Количество 17
BDU:2026-13148
Уязвимость функции auth_server() утилиты для передачи и синхронизации файлов Rsync, позволяющая нарушителю обойти существующие механизмы безопасности
ROS-20261005-80-0001
Уязвимость rsync
ROS-20261005-73-0001
Уязвимость rsync
CVE-2026-70463
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the group name causes the parser to split the entry at the space boundary, discarding the deny rule associated with the group. An authenticated user whose username or group membership would be denied by an @Group Name auth users entry can connect to a restricted module because the deny rule is silently discarded during parsing.
CVE-2026-70463
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the group name causes the parser to split the entry at the space boundary, discarding the deny rule associated with the group. An authenticated user whose username or group membership would be denied by an @Group Name auth users entry can connect to a restricted module because the deny rule is silently discarded during parsing.
CVE-2026-70463
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the group name causes the parser to split the entry at the space boundary, discarding the deny rule associated with the group. An authenticated user whose username or group membership would be denied by an @Group Name auth users entry can connect to a restricted module because the deny rule is silently discarded during parsing.
CVE-2026-70463
rsync 3.1.0 before 3.5.0contains an authorization bypass in auth users ...
ALT-PU-2026-13247
ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7
RLSA-2026:74095
Important: rsync security, bug fix, and enhancement update
ELSA-2026-74095
ELSA-2026-74095: rsync security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:67462
Important: rsync security, bug fix, and enhancement update
ELSA-2026-67462-0
ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:67463
Important: rsync security, bug fix, and enhancement update
ELSA-2026-67463-0
ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)
SUSE-SU-2026:3657-1
Security update for rsync
SUSE-SU-2026:3634-1
Security update for rsync
openSUSE-SU-2026:21650-1
Security update for rsync
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-13148 Уязвимость функции auth_server() утилиты для передачи и синхронизации файлов Rsync, позволяющая нарушителю обойти существующие механизмы безопасности | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | ROS-20261005-80-0001 Уязвимость rsync | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
| ROS-20261005-73-0001 Уязвимость rsync | CVSS3: 8.1 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-70463 rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the group name causes the parser to split the entry at the space boundary, discarding the deny rule associated with the group. An authenticated user whose username or group membership would be denied by an @Group Name auth users entry can connect to a restricted module because the deny rule is silently discarded during parsing. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-70463 rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the group name causes the parser to split the entry at the space boundary, discarding the deny rule associated with the group. An authenticated user whose username or group membership would be denied by an @Group Name auth users entry can connect to a restricted module because the deny rule is silently discarded during parsing. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-70463 rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the group name causes the parser to split the entry at the space boundary, discarding the deny rule associated with the group. An authenticated user whose username or group membership would be denied by an @Group Name auth users entry can connect to a restricted module because the deny rule is silently discarded during parsing. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-70463 rsync 3.1.0 before 3.5.0contains an authorization bypass in auth users ... | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| ALT-PU-2026-13247 ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7 | CVSS3: 9.1 | 3 месяца назад | |
 | RLSA-2026:74095 Important: rsync security, bug fix, and enhancement update | около 1 месяца назад | ||
| ELSA-2026-74095 ELSA-2026-74095: rsync security, bug fix, and enhancement update (IMPORTANT) | около 1 месяца назад | ||
| RLSA-2026:67462 Important: rsync security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-67462-0 ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
| RLSA-2026:67463 Important: rsync security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-67463-0 ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | ||
 | SUSE-SU-2026:3657-1 Security update for rsync | 3 месяца назад | ||
| SUSE-SU-2026:3634-1 Security update for rsync | 3 месяца назад | ||
| openSUSE-SU-2026:21650-1 Security update for rsync | 2 месяца назад |
Уязвимостей на страницу