CSIRT Toscana Rilevate vulnerabilità in Rsync (AL03/260814/CSIRT-ITA)
Data:
14 Agosto 2026
Impatto Sistemico
Alto (65.64)
Sintesi
Rilevate 19 vulnerabilità, di cui 5 con gravità “critica” e 14 con gravità “alta”, in Rsync, software open source per la sincronizzazione e il trasferimento di file tra sistemi.
Tipologia
- Arbitrary Code Execution
- Arbitrary File Read/Write
- Authentication Bypass
- Data Manipulation
- Denial of Service
- Privilege Escalation
- Security Restrictions Bypass
- Spoofing
- Tampering
Prodotti e versioni affette
Rsync, versioni precedenti alla 3.5.0
Azioni di mitigazione
Ove non provveduto, si raccomanda di aggiornare tempestivamente i prodotti vulnerabili all’ultima versione disponibile.
Riferimenti
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-3c3x-ww2w-5r5p
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-rjvj-qgqg-cvx9
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-6692-28cx-wpqq
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-8x5r-mjx8-83hv
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-4mfr-8jrv-49×4
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-g9f4-7q66-9582
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-mch3-qr4p-chgm
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-h2q9-5fr8-w635
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-wj7w-vh23-mm44
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-ffg2-fr5g-3rxw
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-5hcf-7xxm-rmqq
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-hrwq-ccf7-rw5m
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-pfj8-79vq-xgvr
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-w3xf-j2r2-gv4x
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-jhxm-j4mq-3fj4
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-pg7g-xqmr-xpfh
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-gg3m-4m9m-268h
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-78jc-79jv-v6rw
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-9cgc-64g4-3gv5
CVE
Change log
| Versione | Note | Data |
|---|---|---|
| 1.0 | Pubblicato il 14-08-2026 | 14/08/2026 |
Il presente articolo è un prodotto originale di csirt.gov.it, riproposto qui a solo scopo di aumentarne la visibilità. Può essere visualizzato in versione originale al seguente link
Ultimo aggiornamento
14 Agosto 2026, 08:48