CyberRota Analysis
AI-GeneratedRsync versions prior to 3.5.0 are vulnerable to an out-of-bounds write due to improper handling of the return value from snprintf in the parse_size_arg() function, which can lead to memory corruption in the .bss segment. This vulnerability could potentially allow an attacker to manipulate memory, leading to application crashes or arbitrary code execution. Organizations using affected versions of rsync should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a .bss-segment array without bounds checking. When snprintf truncates the formatted size string, the return value equals the number of characters that would have been written including the truncated portion, and this value may exceed the array length. The subsequent indexed write targets memory outside the intended array bounds, corrupting .bss memory.