CyberRota Analysis
AI-GeneratedRsync versions prior to 3.5.0 are vulnerable to an out-of-bounds write in the read_args() function, which can be exploited by a malicious sender to corrupt adjacent heap memory through a crafted argument list. This vulnerability poses a significant risk as it may lead to arbitrary code execution or denial of service. Organizations using affected versions of rsync should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is written one slot beyond the allocation boundary, corrupting adjacent heap memory.