AZL-112646
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112646.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-112646
- Upstream
- Published
- 2026-11-03T16:17:21Z
- Modified
- 2026-11-04T14:17:26Z
- Summary
- CVE-2026-119741 affecting package rsync 3.5.1-1
- Details
-
rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.
- References