← Back

Rsync

rsync

Vendor: Samba • 24 CVEs

CVEs (24)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-2855
1Samba
1Rsync
May 6, 2026
Apr 23, 2014
N/A· v4
N/A· v3
7.8 HIGH· v2
The check_secret function in authenticate.c in rsync 3.1.0 and earlier allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a user name which does not exist in the secrets file.
CVE-2011-1097
1Samba
1Rsync
Apr 29, 2026
Mar 30, 2011
N/A· v4
N/A· v3
5.1 MEDIUM· v2
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitr...Show more
rsync 3.x before 3.0.8, when certain recursion, deletion, and ownership options are used, allows remote rsync servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via malformed data.Show less
CVE-2008-1720
1Samba
1Rsync
Apr 23, 2026
Apr 10, 2008
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in rsync 2.6.9 to 3.0.1, with extended attribute (xattr) support enabled, might allow remote attackers to execute arbitrary code via unknown vectors.
CVE-2002-0080
2Redhat
Samba
2Linux
Rsync
Apr 16, 2026
Mar 15, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be...Show more
rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.Show less