The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no timeout applies, consuming all available connection slots and denying service to legitimate clients.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsyncUpgrade rsync-daemonUpgrade rsync-rrsync | Oct 11, 2026 | Sep 14, 2026 |
| Alpine Linux | — | Upgrade rsync | Sep 1, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade rsync-daemonUpgrade rsync-debugsourceUpgrade rsync-debuginfoUpgrade rsync | Sep 30, 2026 | Aug 13, 2026 |
| Debian | — | Upgrade rsync | Sep 30, 2026 | Aug 13, 2026 |
| Freebsd | — | Upgrade rsync | Aug 27, 2026 | Aug 25, 2026 |
| Redhat Openshift | — | Upgrade ose-rhel-coreos | Oct 1, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade rsync-daemonUpgrade rsyncUpgrade rsync-debuginfoUpgrade rsync-debugsourceUpgrade rsync-rrsyncNo solution exists | Aug 25, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade rsync-debuginfoUpgrade rsyncUpgrade rsync-debugsource | Sep 17, 2026 | Sep 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub