Vulnerability-Lookup

RHSA-2026:19368

Vulnerability from csaf_redhat - Published: 2026-05-19 22:14 - Updated: 2026-05-21 19:35

Summary

Red Hat Security Advisory: rsync security update

Severity

Important

Notes

Topic: An update for rsync is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fix(es): * rsync: rsync server leaks arbitrary client files (CVE-2024-12086) * rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2024-12086

A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE-390 - Detection of Error Condition Without Action

Affected products

Fixed 30 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround

Threats

Impact Moderate

CVE-2026-41035

A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE-805 - Buffer Access with Incorrect Length Value

Affected products

Fixed 30 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch	—	Vendor Fix fix Workaround

Threats

Impact Important

References

17 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:19368	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2330577	external
https://bugzilla.redhat.com/show_bug.cgi?id=2458898	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2024-12086	self
https://bugzilla.redhat.com/show_bug.cgi?id=2330577	external
https://www.cve.org/CVERecord?id=CVE-2024-12086	external
https://nvd.nist.gov/vuln/detail/CVE-2024-12086	external
https://kb.cert.org/vuls/id/952657	external
https://access.redhat.com/security/cve/CVE-2026-41035	self
https://bugzilla.redhat.com/show_bug.cgi?id=2458898	external
https://www.cve.org/CVERecord?id=CVE-2026-41035	external
https://nvd.nist.gov/vuln/detail/CVE-2026-41035	external
https://github.com/RsyncProject/rsync/issues/871	external
https://github.com/RsyncProject/rsync/releases	external
https://www.openwall.com/lists/oss-security/2026/…	external

Acknowledgments

Google Jasiel Spelman Simon Scannell Pedro Gallegos

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for rsync is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool.\n\nSecurity Fix(es):\n\n* rsync: rsync server leaks arbitrary client files (CVE-2024-12086)\n\n* rsync: Rsync: Use-after-free vulnerability in extended attribute handling (CVE-2026-41035)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:19368",
        "url": "https://access.redhat.com/errata/RHSA-2026:19368"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2330577",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330577"
      },
      {
        "category": "external",
        "summary": "2458898",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19368.json"
      }
    ],
    "title": "Red Hat Security Advisory: rsync security update",
    "tracking": {
      "current_release_date": "2026-05-21T19:35:32+00:00",
      "generator": {
        "date": "2026-05-21T19:35:32+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.8.0"
        }
      },
      "id": "RHSA-2026:19368",
      "initial_release_date": "2026-05-19T22:14:02+00:00",
      "revision_history": [
        {
          "date": "2026-05-19T22:14:02+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-05-19T22:14:02+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-05-21T19:35:32+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux BaseOS (v. 9)",
                  "product_id": "BaseOS-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.2.5-7.el9_8.src",
                "product": {
                  "name": "rsync-0:3.2.5-7.el9_8.src",
                  "product_id": "rsync-0:3.2.5-7.el9_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync@3.2.5-7.el9_8?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.2.5-7.el9_8.aarch64",
                "product": {
                  "name": "rsync-0:3.2.5-7.el9_8.aarch64",
                  "product_id": "rsync-0:3.2.5-7.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync@3.2.5-7.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
                "product": {
                  "name": "rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
                  "product_id": "rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debugsource@3.2.5-7.el9_8?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
                "product": {
                  "name": "rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
                  "product_id": "rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debuginfo@3.2.5-7.el9_8?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.2.5-7.el9_8.ppc64le",
                "product": {
                  "name": "rsync-0:3.2.5-7.el9_8.ppc64le",
                  "product_id": "rsync-0:3.2.5-7.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync@3.2.5-7.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
                "product": {
                  "name": "rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
                  "product_id": "rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debugsource@3.2.5-7.el9_8?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
                "product": {
                  "name": "rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
                  "product_id": "rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debuginfo@3.2.5-7.el9_8?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.2.5-7.el9_8.x86_64",
                "product": {
                  "name": "rsync-0:3.2.5-7.el9_8.x86_64",
                  "product_id": "rsync-0:3.2.5-7.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync@3.2.5-7.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
                "product": {
                  "name": "rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
                  "product_id": "rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debugsource@3.2.5-7.el9_8?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
                "product": {
                  "name": "rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
                  "product_id": "rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debuginfo@3.2.5-7.el9_8?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-0:3.2.5-7.el9_8.s390x",
                "product": {
                  "name": "rsync-0:3.2.5-7.el9_8.s390x",
                  "product_id": "rsync-0:3.2.5-7.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync@3.2.5-7.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debugsource-0:3.2.5-7.el9_8.s390x",
                "product": {
                  "name": "rsync-debugsource-0:3.2.5-7.el9_8.s390x",
                  "product_id": "rsync-debugsource-0:3.2.5-7.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debugsource@3.2.5-7.el9_8?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
                "product": {
                  "name": "rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
                  "product_id": "rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-debuginfo@3.2.5-7.el9_8?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "rsync-daemon-0:3.2.5-7.el9_8.noarch",
                "product": {
                  "name": "rsync-daemon-0:3.2.5-7.el9_8.noarch",
                  "product_id": "rsync-daemon-0:3.2.5-7.el9_8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-daemon@3.2.5-7.el9_8?arch=noarch"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "rsync-rrsync-0:3.2.5-7.el9_8.noarch",
                "product": {
                  "name": "rsync-rrsync-0:3.2.5-7.el9_8.noarch",
                  "product_id": "rsync-rrsync-0:3.2.5-7.el9_8.noarch",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/rsync-rrsync@3.2.5-7.el9_8?arch=noarch"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.src",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.2.5-7.el9_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch"
        },
        "product_reference": "rsync-daemon-0:3.2.5-7.el9_8.noarch",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-rrsync-0:3.2.5-7.el9_8.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
        },
        "product_reference": "rsync-rrsync-0:3.2.5-7.el9_8.noarch",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.src",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-0:3.2.5-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64"
        },
        "product_reference": "rsync-0:3.2.5-7.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-daemon-0:3.2.5-7.el9_8.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch"
        },
        "product_reference": "rsync-daemon-0:3.2.5-7.el9_8.noarch",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debuginfo-0:3.2.5-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64"
        },
        "product_reference": "rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.s390x",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-debugsource-0:3.2.5-7.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64"
        },
        "product_reference": "rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "rsync-rrsync-0:3.2.5-7.el9_8.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
          "product_id": "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
        },
        "product_reference": "rsync-rrsync-0:3.2.5-7.el9_8.noarch",
        "relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Jasiel Spelman",
            "Simon Scannell",
            "Pedro Gallegos"
          ],
          "organization": "Google"
        }
      ],
      "cve": "CVE-2024-12086",
      "cwe": {
        "id": "CWE-390",
        "name": "Detection of Error Condition Without Action"
      },
      "discovery_date": "2024-12-05T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2330577"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client\u0027s machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rsync: rsync server leaks arbitrary client files",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability marked as moderate rather than important because it requires the attacker to control the rsync server, which limits the scope of exploitation to scenarios where the client interacts with untrusted or compromised servers. Additionally, the attack is non-trivial, as it relies on the attacker sending specially crafted checksum values and deducing file contents byte-by-byte based on the client\u2019s responses. This makes the exploit more complex and time-consuming compared to direct file access vulnerabilities. Furthermore, the impact is limited to file data enumeration, and it does not allow arbitrary code execution or privilege escalation on the client.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2024-12086"
        },
        {
          "category": "external",
          "summary": "RHBZ#2330577",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330577"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2024-12086",
          "url": "https://www.cve.org/CVERecord?id=CVE-2024-12086"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-12086",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12086"
        },
        {
          "category": "external",
          "summary": "https://kb.cert.org/vuls/id/952657",
          "url": "https://kb.cert.org/vuls/id/952657"
        }
      ],
      "release_date": "2025-01-14T15:06:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T22:14:02+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:19368"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "rsync: rsync server leaks arbitrary client files"
    },
    {
      "cve": "CVE-2026-41035",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "discovery_date": "2026-04-16T08:00:54.200357+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458898"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in rsync. When rsync is configured to handle extended attributes (using the -X or --xattrs option), a remote attacker can exploit a use-after-free vulnerability. This occurs because the receive_xattr function incorrectly processes an untrusted length value during a sorting operation, leading to memory corruption. Successful exploitation can result in a denial of service, causing the rsync process to crash, and may potentially allow for arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw in rsync that allows a remote attacker to cause a denial of service or potentially execute arbitrary code. The vulnerability is present when rsync is used with extended attributes enabled via the `-X` or `--xattrs` option, which is not a default configuration. Exploitation requires the victim to explicitly enable this feature.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
          "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458898",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458898"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41035",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41035"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/issues/871",
          "url": "https://github.com/RsyncProject/rsync/issues/871"
        },
        {
          "category": "external",
          "summary": "https://github.com/RsyncProject/rsync/releases",
          "url": "https://github.com/RsyncProject/rsync/releases"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/16/2",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/16/2"
        }
      ],
      "release_date": "2026-04-16T06:53:05.237000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-05-19T22:14:02+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:19368"
        },
        {
          "category": "workaround",
          "details": "To mitigate this vulnerability, avoid using the -X or --xattrs options with rsync if extended attribute handling is not essential for your operations. Disabling these options prevents the vulnerable code path from being exercised. This may impact functionality that relies on extended attributes.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.src",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-daemon-0:3.2.5-7.el9_8.noarch",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debuginfo-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.aarch64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.ppc64le",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.s390x",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-debugsource-0:3.2.5-7.el9_8.x86_64",
            "BaseOS-9.8.0.Z.MAIN.EUS:rsync-rrsync-0:3.2.5-7.el9_8.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "rsync: Rsync: Use-after-free vulnerability in extended attribute handling"
    }
  ]
}

CVE-2024-12086 (GCVE-0-2024-12086)

Vulnerability from cvelistv5 – Published: 2025-01-14 17:37 – Updated: 2026-05-20 02:44

Title

Rsync: rsync server leaks arbitrary client files

Summary

Severity ?

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N

CWE

CWE-390 - Detection of Error Condition Without Action

Assigner

redhat

References

5 references

URL	Tags
https://access.redhat.com/errata/RHBA-2025:6470	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:19368	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2024-12086	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2330577	issue-trackingx_refsource_REDHAT
https://kb.cert.org/vuls/id/952657

Impacted products

8 products

Vendor	Product	Version
		Affected: 0 , ≤ 3.3.0 (semver)
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.4.1-2.el10 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.0
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.2.5-7.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:3.2.5-7.el9_8 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/o:redhat:enterprise_linux:9::baseos
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6
Red Hat	Red Hat Enterprise Linux 7	cpe:/o:redhat:enterprise_linux:7
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4

Date Public ?

2025-01-14 15:06

Credits

Red Hat would like to thank Jasiel Spelman (Google), Pedro Gallegos (Google), and Simon Scannell (Google) for reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-12086",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-26T14:14:25.165183Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-26T14:20:53.620Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/google/security-research/security/advisories/GHSA-p5pg-x43v-mvqj"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T21:52:14.220Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250131-0002/"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00008.html"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/952657"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://github.com/RsyncProject/rsync",
          "defaultStatus": "unaffected",
          "packageName": "rsync",
          "versions": [
            {
              "lessThanOrEqual": "3.3.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "rsync",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.4.1-2.el10",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "rsync",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.2.5-7.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/o:redhat:enterprise_linux:9::baseos"
          ],
          "defaultStatus": "affected",
          "packageName": "rsync",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.2.5-7.el9_8",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "rsync",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:7"
          ],
          "defaultStatus": "unknown",
          "packageName": "rsync",
          "product": "Red Hat Enterprise Linux 7",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:8"
          ],
          "defaultStatus": "affected",
          "packageName": "rsync",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:openshift:4"
          ],
          "defaultStatus": "affected",
          "packageName": "rhcos",
          "product": "Red Hat OpenShift Container Platform 4",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Red Hat would like to thank Jasiel Spelman (Google), Pedro Gallegos (Google), and Simon Scannell (Google) for reporting this issue."
        }
      ],
      "datePublic": "2025-01-14T15:06:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client\u0027s machine. This issue occurs when files are being copied from a client to a server. During this process, the rsync server will send checksums of local data to the client to compare with in order to determine what data needs to be sent to the server. By sending specially constructed checksum values for arbitrary files, an attacker may be able to reconstruct the data of those files byte-by-byte based on the responses from the client."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-390",
              "description": "Detection of Error Condition Without Action",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-20T02:44:21.884Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHBA-2025:6470",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHBA-2025:6470"
        },
        {
          "name": "RHSA-2026:19368",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:19368"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2024-12086"
        },
        {
          "name": "RHBZ#2330577",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2330577"
        },
        {
          "url": "https://kb.cert.org/vuls/id/952657"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2024-12-05T00:00:00.000Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2025-01-14T15:06:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Rsync: rsync server leaks arbitrary client files",
      "workarounds": [
        {
          "lang": "en",
          "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-390: Detection of Error Condition Without Action"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2024-12086",
    "datePublished": "2025-01-14T17:37:54.960Z",
    "dateReserved": "2024-12-03T08:57:58.397Z",
    "dateUpdated": "2026-05-20T02:44:21.884Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-41035 (GCVE-0-2026-41035)

Vulnerability from cvelistv5 – Published: 2026-04-16 06:53 – Updated: 2026-04-22 03:03

Summary

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.

Severity ?

7.4 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-130 - Improper Handling of Length Parameter Inconsistency

Assigner

mitre

References

3 references

URL	Tags
https://www.openwall.com/lists/oss-security/2026/…
https://github.com/RsyncProject/rsync/releases
https://github.com/RsyncProject/rsync/issues/871

Impacted products

1 product

Vendor	Product	Version
Samba	rsync	Affected: 3.0.1 , ≤ 3.4.1 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-41035",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-16T12:20:04.768680Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-16T12:30:58.505Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-04-22T03:03:52.565Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/16/9"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/22/3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "rsync",
          "vendor": "Samba",
          "versions": [
            {
              "lessThanOrEqual": "3.4.1",
              "status": "affected",
              "version": "3.0.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "3.4.1",
                  "versionStartIncluding": "3.0.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-130",
              "description": "CWE-130 Improper Handling of Length Parameter Inconsistency",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-16T18:23:49.396Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.openwall.com/lists/oss-security/2026/04/16/2"
        },
        {
          "url": "https://github.com/RsyncProject/rsync/releases"
        },
        {
          "url": "https://github.com/RsyncProject/rsync/issues/871"
        }
      ],
      "x_generator": {
        "engine": "CVE-Request-form 0.0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-41035",
    "datePublished": "2026-04-16T06:53:05.237Z",
    "dateReserved": "2026-04-16T06:53:04.777Z",
    "dateUpdated": "2026-04-22T03:03:52.565Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:19368

CVE-2024-12086 (GCVE-0-2024-12086)

CVE-2026-41035 (GCVE-0-2026-41035)

Tags

Sightings

Nomenclature