CVE-2026-70458
- Source
- https://cve.org/CVERecord?id=CVE-2026-70458
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-70458.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-70458
- Aliases
-
- GHSA-gg3m-4m9m-268h
- Downstream
ALPINE (1)
AZL (1)
BELL (1)
CLSA (12)
DEBIAN (1)
ECHO (1)
MGASA (1)
openSUSE (2)
ROOT (1)
SUSE (6)
UBUNTU (1)
- Related
- Published
- 2026-08-13T14:44:06Z
- Modified
- 2026-11-08T02:47:41Z
- Severity
-
- 8.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling
- Details
-
rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing F_SUM field in the file_struct layout to access memory past the end of the allocated structure, corrupting adjacent heap or stack data.
- Database specific
{ "cna_assigner": "VulnCheck", "cwe_ids": [ "CWE-787" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/70xxx/CVE-2026-70458.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/70xxx/CVE-2026-70458.json
- https://github.com/RsyncProject/rsync/releases/tag/v3.5.0
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-gg3m-4m9m-268h
- https://nvd.nist.gov/vuln/detail/CVE-2026-70458
- https://www.vulncheck.com/advisories/rsync-out-of-bounds-write-via-flag-hlinked-handling
- https://github.com/RsyncProject/rsync
Affected packages
Git / git.samba.org/rsync.git/
Affected ranges
- Type
- GIT
- Repo
- https://git.samba.org/rsync.git/
- Events
-
Introduced4cb6197b21d9860736c8e6d81b8eb8cac53beb5aFixed471e17dc0d68233db84db11be82c9f62f4661214
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.0" }, { "fixed": "3.5.0" } ], "source": "CPE_RANGE" } ] }
- Type
- GIT
- Repo
- https://github.com/rsyncproject/rsync
- Events
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:samba:rsync:*:*:*:*:*:*:*:*", "range": [ { "introduced": "3.0.0" }, { "fixed": "3.5.0" } ], "source": "CPE_RANGE" }, { "original_tag": "v3.5.0", "range": [ { "fixed": "471e17dc0d68233db84db11be82c9f62f4661214" } ], "source": "REFERENCES_TAG" } ] }
Affected versions
v3.*
v3.0.0
v3.0.1
v3.0.1pre1
v3.0.1pre2
v3.0.1pre3
v3.0.2
v3.0.3
v3.0.3pre1
v3.0.3pre2
v3.0.3pre3
v3.1.0
v3.1.0pre1
v3.1.1
v3.1.1pre1
v3.1.1pre2
v3.1.2
v3.1.2pre1
v3.1.3
v3.1.3pre1
v3.2.0
v3.2.0pre1
v3.2.0pre2
v3.2.0pre3
v3.2.1
v3.2.1pre1
v3.2.2
v3.2.2pre1
v3.2.2pre2
v3.2.2pre3
v3.2.3
v3.2.3pre1
v3.2.4
v3.2.4pre1
v3.2.4pre2
v3.2.4pre3
v3.2.4pre4
v3.2.5
v3.2.5pre1
v3.2.5pre2
v3.2.6
v3.2.7
v3.2.7pre1
v3.3.0
v3.3.0pre1
v3.4
v3.4.0
v3.4.1
v3.4.2
v3.4.3