7.4
Élevée
CVE-2026-41035 In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a…
Description
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| rsync 3.0 | 3.0.1 → 3.4.1 | Pas de correctif indiqué |
| Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION) | Versions non publiées | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.13 413.92 | premières → < 413.92.202606160406-0 | 413.92.202606160406-0 |
| Red Hat OpenShift Container Platform 4.15 415.92 | premières → < 415.92.202606030318-0 | 415.92.202606030318-0 |
| Red Hat OpenShift Container Platform 4.16 416.94 | premières → < 416.94.202606051757-0 | 416.94.202606051757-0 |
| Red Hat OpenShift Container Platform 4.18 418.94 | premières → < 418.94.202606051320-0 | 418.94.202606051320-0 |
| Red Hat OpenShift Container Platform 4.19 4.19 | premières → < 4.19.9.6.202606031700-0 | 4.19.9.6.202606031700-0 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions non publiées |
Afficher les 41 autres branches Masquer les 41 autres branches
Références
- www.openwall.com www.openwall.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification