https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 23:52:31 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119741 <p>rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender&#39;s hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.</p> <p>rsync before 3.5.2 contains a denial of service vulnerability in the delta-transfer sender&#39;s hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119741 https://db.gcve.eu/vuln/ghsa-56w4-j8c7-xvrw <p>rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender&#39;s hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.</p> <p>rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender&#39;s hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.</p> https://db.gcve.eu/vuln/ghsa-56w4-j8c7-xvrw https://db.gcve.eu/vuln/msrc_cve-2026-119741 msrc_CVE-2026-119741 https://db.gcve.eu/vuln/msrc_cve-2026-119741 https://db.gcve.eu/vuln/ubuntu-cve-2026-119741 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rsync, Ubuntu:Pro:16.04:LTS: rsync, Ubuntu:Pro:18.04:LTS: rsync, Ubuntu:Pro:20.04:LTS: rsync, Ubuntu:22.04:LTS: rsync, Ubuntu:24.04:LTS: rsync, Ubuntu:26.10: rsync, Ubuntu:26.04:LTS: rsync</p> <p>rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender&#39;s hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: rsync, Ubuntu:Pro:16.04:LTS: rsync, Ubuntu:Pro:18.04:LTS: rsync, Ubuntu:Pro:20.04:LTS: rsync, Ubuntu:22.04:LTS: rsync, Ubuntu:24.04:LTS: rsync, Ubuntu:26.10: rsync, Ubuntu:26.04:LTS: rsync</p> <p>rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender&#39;s hash_search() in match.c that allows malicious receivers to trigger unbounded strong-checksum work at consecutive offsets. Unauthenticated attackers pulling from a public daemon module can supply weak checksums colliding with consecutive rolling windows plus non-matching strong checksums, exhausting sender CPU across concurrent connections.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-119741