CVE-2026-70461

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-70461
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-70461.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-70461
Aliases
  • GHSA-jhxm-j4mq-3fj4
Downstream
ALPINE (1)
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
MGASA (1)
OESA (3)
openSUSE (2)
RHSA (3)
RLSA (3)
ROOT (1)
SUSE (6)
UBUNTU (1)
Related
ALSA (3)
openSUSE (2)
SUSE (6)
Published
2026-08-13T14:42:49Z
Modified
2026-10-22T10:36:30Z
Severity
  • 8.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
Details

rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation by supplying a crafted files-from entry. Attackers can trigger the vulnerability against a read-only rsync daemon module by providing a files-from entry containing both an interior and trailing backslash, causing the add_implied_include() function to under-count the trailing backslash when sizing the destination buffer.

Database specific 
{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-787"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/70xxx/CVE-2026-70461.json"
}
References

Affected packages

Git / github.com/rsyncproject/rsync

Affected ranges

Type
GIT
Repo
https://github.com/rsyncproject/rsync
Events
Introduced
0e10163a9d984a8858f7d83b5c7b46889536aa96
Fixed
471e17dc0d68233db84db11be82c9f62f4661214
Database specific
Show details 
{
    "extracted_events": [
        {
            "cpe": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*",
            "range": [
                {
                    "introduced": "3.2.5"
                },
                {
                    "fixed": "3.5.0"
                }
            ],
            "source": "CPE_RANGE"
        },
        {
            "original_tag": "v3.5.0",
            "range": [
                {
                    "fixed": "471e17dc0d68233db84db11be82c9f62f4661214"
                }
            ],
            "source": "REFERENCES_TAG"
        }
    ]
}

Affected versions

v3.*
v3.2.5
v3.2.6
v3.2.7
v3.2.7pre1
v3.3.0
v3.3.0pre1
v3.4
v3.4.0
v3.4.1
v3.4.2
v3.4.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-70461.json"