Search CVE reports

[GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion]

[GHSA-58ph-q79f-7x9x: HTTP server: unbounded request accumulation]

[GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth]

[GHSA-38fq-mrrg-8rmr: RtlTcp: malformed greeting causes daemon exit]

[GHSA-5xr9-fmm8-7p8x: remotetrx NetUplink: connection object leak DoS]

[GHSA-xmcv-mjpv-x46q: Audio decoders: stack VLA exhaustion]

rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without...

rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group...

rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSG_IO_TIMEOUT messages...

rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation by supplying a crafted files-from...