AZL-95786
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95786.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-95786
- Upstream
- Published
- 2026-08-13T15:19:43Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-53792 affecting package rsync for versions less than 3.5.0-1
- Details
-
rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a length of zero. Attackers can send a specially crafted checksum set containing a zero-length block to cause a negative offset calculation during delta computation, resulting in an out-of-bounds read of file data buffer memory on the sender side.
- References