CyberRota Analysis
AI-GeneratedRsync versions prior to 3.5.0 are vulnerable to a null pointer dereference in the daemon child process, allowing remote attackers to crash the daemon by sending a specially crafted file list. This vulnerability can lead to service disruption, impacting the availability of the rsync service. Organizations using affected versions should prioritize patching to mitigate potential denial-of-service risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a directory structure pointer without verifying the entry type, resulting in an invalid or uninitialized pointer dereference that terminates the client connection.