Поиск уязвимостей
Количество 18
Количество 18
CVE-2026-70464
rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all available connection slots and denying service to legitimate clients.
CVE-2026-70464
rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all available connection slots and denying service to legitimate clients.
CVE-2026-70464
rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all available connection slots and denying service to legitimate clients.
CVE-2026-70464
rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
CVE-2026-70464
rsync daemon 2.0.0 before 3.5.0contains a denial of service vulnerabil ...
BDU:2026-14714
Уязвимость утилиты для передачи и синхронизации файлов Rsync, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20261005-80-0002
Уязвимость rsync
ROS-20261005-73-0002
Уязвимость rsync
RLSA-2026:74095
Important: rsync security, bug fix, and enhancement update
ELSA-2026-74095
ELSA-2026-74095: rsync security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:67462
Important: rsync security, bug fix, and enhancement update
ELSA-2026-67462-0
ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT)
RLSA-2026:67463
Important: rsync security, bug fix, and enhancement update
ELSA-2026-67463-0
ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT)
SUSE-SU-2026:3657-1
Security update for rsync
SUSE-SU-2026:3634-1
Security update for rsync
openSUSE-SU-2026:21650-1
Security update for rsync
ALT-PU-2026-13247
ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2026-70464 rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all available connection slots and denying service to legitimate clients. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-70464 rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all available connection slots and denying service to legitimate clients. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-70464 rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all available connection slots and denying service to legitimate clients. | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-70464 rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
CVE-2026-70464 rsync daemon 2.0.0 before 3.5.0contains a denial of service vulnerabil ... | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
BDU:2026-14714 Уязвимость утилиты для передачи и синхронизации файлов Rsync, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | 3 месяца назад | |
ROS-20261005-80-0002 Уязвимость rsync | CVSS3: 7.5 | 1% Низкий | около 1 месяца назад | |
ROS-20261005-73-0002 Уязвимость rsync | CVSS3: 7.5 | 1% Низкий | около 1 месяца назад | |
RLSA-2026:74095 Important: rsync security, bug fix, and enhancement update | около 1 месяца назад | |||
ELSA-2026-74095 ELSA-2026-74095: rsync security, bug fix, and enhancement update (IMPORTANT) | около 1 месяца назад | |||
RLSA-2026:67462 Important: rsync security, bug fix, and enhancement update | около 2 месяцев назад | |||
ELSA-2026-67462-0 ELSA-2026-67462-0: rsync security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | |||
RLSA-2026:67463 Important: rsync security, bug fix, and enhancement update | около 2 месяцев назад | |||
ELSA-2026-67463-0 ELSA-2026-67463-0: rsync security, bug fix, and enhancement update (IMPORTANT) | около 2 месяцев назад | |||
SUSE-SU-2026:3657-1 Security update for rsync | 3 месяца назад | |||
SUSE-SU-2026:3634-1 Security update for rsync | 3 месяца назад | |||
openSUSE-SU-2026:21650-1 Security update for rsync | 2 месяца назад | |||
ALT-PU-2026-13247 ALT-PU-2026-13247: package `rsync` update to version 3.2.7-alt7 | CVSS3: 9.1 | 3 месяца назад |
Уязвимостей на страницу