CVE-2026-70461 Details
Description
rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation by supplying a crafted files-from entry. Attackers can trigger the vulnerability against a read-only rsync daemon module by providing a files-from entry containing both an interior and trailing backslash, causing the add_implied_include() function to under-count the trailing backslash when sizing the destination buffer.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 13, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/RsyncProject/rsync/releases/tag/v3.5.0 | [email protected] | ProductRelease Notes |
| https://github.com/RsyncProject/rsync/security/advisories/GHSA-jhxm-j4mq-3fj4 | [email protected] | Vendor Advisory |
| https://www.vulncheck.com/advisories/rsync-heap-out-of-bounds-write-via-files-from-entry | [email protected] | Release NotesThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| samba rsync | >= 3.2.5, < 3.5.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 31, 2026 | Initial Analysis | [email protected] |
| Aug 13, 2026 | CVE Modified | CISA-ADP |
| Aug 13, 2026 | New CVE Received | [email protected] |