rsync

Direct Vulnerabilities

Known vulnerabilities in the rsync package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Allocation of Resources Without Limits or Throttling	<0:3.5.0-3.el10_2
H Directory Traversal	<0:3.5.0-3.el10_2
H Authentication Bypass	<0:3.5.0-3.el10_2
H Out-of-bounds Write	<0:3.5.0-3.el10_2
H Algorithmic Complexity	<0:3.5.0-3.el10_2
H Not Failing Securely ('Failing Open')	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Out-of-bounds Write	<0:3.5.0-3.el10_2
H Symlink Following	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Out-of-bounds Write	<0:3.5.0-3.el10_2
H Link Following	<0:3.5.0-3.el10_2
H Incorrect Authorization	<0:3.5.0-3.el10_2
H Reliance on Untrusted Inputs in a Security Decision	<0:3.5.0-3.el10_2
H Improper Certificate Validation	<0:3.5.0-3.el10_2
H OS Command Injection	<0:3.5.0-3.el10_2
H Allocation of Resources Without Limits or Throttling	<0:3.5.0-3.el10_2
H Incorrect Calculation of Buffer Size	<0:3.5.0-3.el10_2
H Improper Handling of Length Parameter Inconsistency	<0:3.4.4-1.el10_2
H Time-of-check Time-of-use (TOCTOU)	<0:3.4.4-1.el10_2
H Out-of-bounds Read	<0:3.4.4-1.el10_2
M CVE-2025-10158	<0:3.4.1-2.el10_1.2