Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-45232
Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves between the client and proxy or controlling the proxy server to send a response line of 1023 or more bytes without a newline terminator, causing a null byte to be written to an out-of-bounds stack address when the RSYNC_PROXY environment variable is set.
CVE-2026-45232
Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves between the client and proxy or controlling the proxy server to send a response line of 1023 or more bytes without a newline terminator, causing a null byte to be written to an out-of-bounds stack address when the RSYNC_PROXY environment variable is set.
CVE-2026-45232
Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves between the client and proxy or controlling the proxy server to send a response line of 1023 or more bytes without a newline terminator, causing a null byte to be written to an out-of-bounds stack address when the RSYNC_PROXY environment variable is set.
CVE-2026-45232
Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy
CVE-2026-45232
Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack ...
ROS-20261005-80-0034
Уязвимость rsync
ROS-20261005-73-0034
Уязвимость rsync
openSUSE-SU-2026:20877-1
Security update for rsync
SUSE-SU-2026:2083-1
Security update for rsync
SUSE-SU-2026:2048-1
Security update for rsync
SUSE-SU-2026:2038-1
Security update for rsync
ALT-PU-2026-13247
ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-45232 Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves between the client and proxy or controlling the proxy server to send a response line of 1023 or more bytes without a newline terminator, causing a null byte to be written to an out-of-bounds stack address when the RSYNC_PROXY environment variable is set. | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-45232 Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves between the client and proxy or controlling the proxy server to send a response line of 1023 or more bytes without a newline terminator, causing a null byte to be written to an out-of-bounds stack address when the RSYNC_PROXY environment variable is set. | CVSS3: 5.9 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-45232 Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in socket.c that allows network attackers to corrupt stack memory by sending a malformed HTTP proxy response. Attackers can exploit this by positioning themselves between the client and proxy or controlling the proxy server to send a response line of 1023 or more bytes without a newline terminator, causing a null byte to be written to an out-of-bounds stack address when the RSYNC_PROXY environment variable is set. | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-45232 Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy | CVSS3: 3.1 | 0% Низкий | 6 месяцев назад |
| CVE-2026-45232 Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack ... | CVSS3: 3.7 | 0% Низкий | 6 месяцев назад |
 | ROS-20261005-80-0034 Уязвимость rsync | CVSS3: 3.1 | 0% Низкий | около 1 месяца назад |
| ROS-20261005-73-0034 Уязвимость rsync | CVSS3: 3.1 | 0% Низкий | около 1 месяца назад |
 | openSUSE-SU-2026:20877-1 Security update for rsync | 5 месяцев назад | ||
| SUSE-SU-2026:2083-1 Security update for rsync | 6 месяцев назад | ||
| SUSE-SU-2026:2048-1 Security update for rsync | 6 месяцев назад | ||
| SUSE-SU-2026:2038-1 Security update for rsync | 6 месяцев назад | ||
| ALT-PU-2026-13247 ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7 | CVSS3: 9.1 | 3 месяца назад |
Уязвимостей на страницу