Out-of-Bounds Array Read in Rsync File Synchronization Tool

CVE-2026-44510

What is CVE-2026-44510?

Rsync, a file-copying tool utilizing a delta-transfer algorithm, is susceptible to an out-of-bounds array read in its recv_files() function. This vulnerability allows a malicious rsync server to deterministically crash any client that connects to it. The exploitation can occur without any special options on the client's end and affects both rsync:// URLs and remote-shell pulls. By manipulating the file list sent during a transfer, the attacker can cause the client to read beyond allocated memory, leading to a crash. The vulnerability presents a crash-only impact, verified in glibc x86-64 Linux, but remains non-leveragable for exploitation. This issue has been addressed in version 3.4.3.

References