Integer overflow in the receive_xattr function in the extended attributes patch (xattr.c) for rsync before 2.6.8 might allow attackers to execute arbitrary code via crafted extended attributes that trigger a buffer overflow.
{ "urgency": "high" }
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2006-2083.json"