rsync | Snyk

Direct Vulnerabilities

Known vulnerabilities in the rsync package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M CRLF Injection	*
M Incorrect Privilege Assignment	*
M Directory Traversal	*
M Link Following	*
M Time-of-check Time-of-use (TOCTOU)	*
M Time-of-check Time-of-use (TOCTOU)	*
M Incomplete Filtering of Special Elements	*
M Time-of-check Time-of-use (TOCTOU)	*
M NULL Pointer Dereference	*
M Directory Traversal	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
M Out-of-bounds Write	<0:3.5.0-3.el10_2
M Integer Overflow or Wraparound	*
M Improper Certificate Validation	<0:3.5.0-3.el10_2
H Allocation of Resources Without Limits or Throttling	<0:3.5.0-3.el10_2
H Incorrect Authorization	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Out-of-bounds Write	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
M Allocation of Resources Without Limits or Throttling	*
H Authentication Bypass	<0:3.5.0-3.el10_2
H Not Failing Securely ('Failing Open')	<0:3.5.0-3.el10_2
H OS Command Injection	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Out-of-bounds Write	<0:3.5.0-3.el10_2
H Allocation of Resources Without Limits or Throttling	<0:3.5.0-3.el10_2
H Out-of-bounds Write	<0:3.5.0-3.el10_2
M Improper Validation of Array Index	*
M Allocation of Resources Without Limits or Throttling	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
M Authentication Bypass	*
M Out-of-bounds Read	*
M Link Following	*
H Integer Overflow or Wraparound	<0:3.4.4-1.el10_2
H Time-of-check Time-of-use (TOCTOU)	<0:3.4.4-1.el10_2
M Off-by-one Error	*
H Buffer Access with Incorrect Length Value	<0:3.4.1-6.el10_2
L Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Validation of Array Index	<0:3.4.1-2.el10_1.2
M Detection of Error Condition Without Action	<0:3.4.1-2.el10
H Use of Uninitialized Resource	<0:3.4.1-2.el10
C Heap-based Buffer Overflow	<0:3.4.1-2.el10
M Directory Traversal	<0:3.4.1-2.el10
M Directory Traversal	<0:3.4.1-2.el10
M Race Condition	<0:3.4.1-2.el10

Vulnerability

Vulnerable Version

CRLF Injection