01 Record

CVE-2026-70458

rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling

HighPUBLISHEDCNA: VulnCheck

Base score8.8 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

02 Description

rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling

Published: 2026-08-13 14:44Z1 DAY AGO
Last updated: 2026-08-14 16:51Z1 HR AGO
Reserved: 2026-08-04
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: High (CVSS 8.8)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Weaknesses: CWE-787
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: 9125b39933b28d3d6e459cf912874247d0e36de3162d352ef112a3dfa8afbb1c

VendorProductVersionsPlatforms

RsyncProjectrsync3.0.0 to 3.4.4—