The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A malicious rsync server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rsync client target directory and subdirectories (for example, overwrite the .ssh/authorized_keys file).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsync-daemonUpgrade rsync | Sep 1, 2022 | Aug 2, 2022 |
| Alpine Linux | — | Upgrade rsync | Aug 22, 2024 | Aug 2, 2022 |
| Amazon Linux Ami 2 | — | Upgrade rsync-debuginfoUpgrade rsync | Nov 10, 2022 | Aug 2, 2022 |
| Amazon_linux_2023 | — | Upgrade rsync-daemonUpgrade rsyncUpgrade rsync-debugsourceUpgrade rsync-debuginfo | Feb 17, 2025 | Aug 2, 2022 |
| Centos_linux | — | Upgrade rsyncUpgrade rsync-debugsourceUpgrade rsync-debuginfoUpgrade rsync-daemon | Aug 26, 2022 | Aug 2, 2022 |
| Debian | — | Upgrade rsync | Jul 30, 2024 | Aug 2, 2022 |
| Dell Powerstore Dsa2023173 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Jun 21, 2023 |
| Freebsd | — | Upgrade rsync | Nov 4, 2022 | Aug 10, 2022 |
| Gentoo Linux | — | Upgrade net-misc/rsync. | May 10, 2024 | Aug 2, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade rsync | Nov 3, 2022 | Aug 2, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade rsync | Oct 11, 2022 | Aug 2, 2022 |
| Huawei Euleros 2_0_sp8 | — | Upgrade rsync-daemonUpgrade rsync | Oct 11, 2022 | Aug 2, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade rsync | Nov 15, 2022 | Aug 2, 2022 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Sep 4, 2023 |
| Oracle_linux | — | Upgrade rsyncUpgrade rsync-daemon | Aug 25, 2022 | Aug 2, 2022 |
| Redhat_linux | — | Upgrade rsync-daemonUpgrade rsync-debuginfoUpgrade rsync-debugsourceUpgrade rsyncNo solution exists | Aug 26, 2022 | Aug 2, 2022 |
| Rocky_linux | — | Upgrade rsyncUpgrade rsync-debugsourceUpgrade rsync-debuginfo | Sep 2, 2022 | Aug 2, 2022 |
| Suse | — | Upgrade rsync | Oct 26, 2022 | Aug 2, 2022 |
| Ubuntu | — | Upgrade rsync | Mar 22, 2023 | Aug 2, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 2, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub