AZL-95759
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95759.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-95759
- Upstream
- Published
- 2026-08-13T15:19:59Z
- Modified
- 2026-09-10T14:17:38Z
- Summary
- CVE-2026-70458 affecting package rsync for versions less than 3.5.0-1
- Details
-
rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing F_SUM field in the file_struct layout to access memory past the end of the allocated structure, corrupting adjacent heap or stack data.
- References