01 Record

CVE-2026-70462

rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT

HighPUBLISHEDCNA: VulnCheck

Base score7.1 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

02 Description

rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT

Published: 2026-08-13 14:42Z1 DAY AGO
Last updated: 2026-08-14 16:51Z1 HR AGO
Reserved: 2026-08-04
Assigning CNA: VulnCheck
Record state: PUBLISHED
Severity: High (CVSS 7.1)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weaknesses: CWE-190 CWE-835
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 421ba7e23f9f9ef23efe3eadd41b32ef022ac941314d5d1f2dc6b97a5a4764cb

VendorProductVersionsPlatforms

RsyncProjectrsync3.1.0 to 3.4.4—