7.5Alta
CVE-2026-119741rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions
Descripción
rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.
Debilidad (CWE):
CWE-407
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| RsyncProject | rsync | ≤ 3.5.1, fixed 3.5.2 | |
| samba | rsync | < 3.5.2 |
Referencias y parches
- Fixed Release Tag release-notes
- Pull Request #1132 patchissue-trackingIssue TrackingPatch
- Patch Commit patchPatch
- https://github.com/RsyncProject/rsync/blob/a7404a9a633cff28ee1602f328b9c3fa69cdbd04/testsuite/hashsearch-coll… technical-descriptionPatch
- VulnCheck Advisory: rsync through 3.5.1 Denial of Service via hash_search() Checksum Collisions third-party-advisoryThird Party Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*≤ 3.5.1