5.3Medium
CVE-2026-70459rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
Description
rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a directory structure pointer without verifying the entry type, resulting in an invalid or uninitialized pointer dereference that terminates the client connection.
Weakness (CWE):
CWE-908
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| RsyncProject | rsync | 3.0.0 – ≤ 3.4.4, fixed 3.5.0 | |
| samba | rsync | 3.0.0 – ≤ 3.4.4 |
References and patches
- GitHub Security Advisory (GHSA-p4v4-qxw9-q72m) vendor-advisoryVendor Advisory
- rsync 3.5.0 Release Notes release-notesProductRelease Notes
- https://www.vulncheck.com/advisories/rsync-daemon-crash-via-malformed-file-list-entry third-party-advisoryRelease NotesThird Party Advisory
CPE matches (NVD) (1)
cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*≥ 3.0.0 < 3.5.0