CyberRota Analysis
AI-GeneratedRsync versions prior to 3.5.0 are vulnerable to an algorithmic complexity issue in the hash_search() function, which can be exploited by remote attackers to induce a denial of service. By sending a specially crafted file list, an attacker can trigger excessive CPU resource consumption on the receiver, leading to service disruption. Organizations using affected versions of rsync, particularly those relying on it for file synchronization in critical environments, should prioritize updating to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list. A sender can exploit the quadratic-time worst-case behavior in hash lookups to exhaust receiver CPU resources with a modest number of crafted entries, causing a sustained denial of service.