Skip to content
fr Sign in
6.1 Medium

CVE-2026-43618 Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit…

Description

Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allowing a malicious sender to trigger an overflow that causes the receiver process to read and return data from outside the intended buffer bounds. Attackers can exploit this vulnerability to disclose process memory contents including environment variables, passwords, heap and stack data, and library memory pointers, significantly reducing ASLR effectiveness and facilitating further exploitation.

Affected products and versions

Product Affected versions Fixed in
rsync 3.4 earliest → < 3.4.3 3.4.3
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Enterprise Linux BaseOS (v. 10) Versions not published
Red Hat Enterprise Linux BaseOS (v. 8) Versions not published
Red Hat Enterprise Linux BaseOS (v. 9) Versions not published
Red Hat Discovery 2 1782166952 earliest → < 1782166952 1782166952
Red Hat Enterprise Linux 6 Versions not published
Red Hat Enterprise Linux 7 Versions not published
Show the 4 other branches
Product Affected versions Fixed in
Red Hat OpenShift Container Platform 4 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 8 Versions not published
Red Hat Enterprise Linux 9 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of rsync

The 44 CVEs of rsync →
CVE-2026-119741 rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions 8.7 High CVE-2026-70452 rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent… 9.1 Critical CVE-2026-70453 rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote… 8.7 High CVE-2026-70454 rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation… 7.6 High
Track this CVE