Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-70459

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a directory structure pointer without verifying the entry type, resulting in an invalid or uninitialized pointer dereference that terminates the client connection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 31.3%
CVSS Severity
CVSS v3 Score 5.3
Products affected by CVE-2026-70459
  • Samba » Rsync » Version: 3.0.0
    cpe:2.3:a:samba:rsync:3.0.0
  • Samba » Rsync » Version: 3.0.1
    cpe:2.3:a:samba:rsync:3.0.1
  • Samba » Rsync » Version: 3.0.2
    cpe:2.3:a:samba:rsync:3.0.2
  • Samba » Rsync » Version: 3.0.3
    cpe:2.3:a:samba:rsync:3.0.3
  • Samba » Rsync » Version: 3.0.4
    cpe:2.3:a:samba:rsync:3.0.4
  • Samba » Rsync » Version: 3.0.5
    cpe:2.3:a:samba:rsync:3.0.5
  • Samba » Rsync » Version: 3.0.6
    cpe:2.3:a:samba:rsync:3.0.6
  • Samba » Rsync » Version: 3.0.7
    cpe:2.3:a:samba:rsync:3.0.7
  • Samba » Rsync » Version: 3.0.8
    cpe:2.3:a:samba:rsync:3.0.8
  • Samba » Rsync » Version: 3.0.9
    cpe:2.3:a:samba:rsync:3.0.9
  • Samba » Rsync » Version: 3.1.0
    cpe:2.3:a:samba:rsync:3.1.0
  • Samba » Rsync » Version: 3.1.1
    cpe:2.3:a:samba:rsync:3.1.1
  • Samba » Rsync » Version: 3.1.2
    cpe:2.3:a:samba:rsync:3.1.2
  • Samba » Rsync » Version: 3.1.3
    cpe:2.3:a:samba:rsync:3.1.3
  • Samba » Rsync » Version: 3.2.0
    cpe:2.3:a:samba:rsync:3.2.0
  • Samba » Rsync » Version: 3.2.1
    cpe:2.3:a:samba:rsync:3.2.1
  • Samba » Rsync » Version: 3.2.2
    cpe:2.3:a:samba:rsync:3.2.2
  • Samba » Rsync » Version: 3.2.3
    cpe:2.3:a:samba:rsync:3.2.3
  • Samba » Rsync » Version: 3.2.4
    cpe:2.3:a:samba:rsync:3.2.4
  • Samba » Rsync » Version: 3.2.5
    cpe:2.3:a:samba:rsync:3.2.5
  • Samba » Rsync » Version: 3.2.6
    cpe:2.3:a:samba:rsync:3.2.6
  • Samba » Rsync » Version: 3.2.7
    cpe:2.3:a:samba:rsync:3.2.7
  • Samba » Rsync » Version: 3.3.0
    cpe:2.3:a:samba:rsync:3.3.0
  • Samba » Rsync » Version: 3.4.0
    cpe:2.3:a:samba:rsync:3.4.0
  • Samba » Rsync » Version: 3.4.1
    cpe:2.3:a:samba:rsync:3.4.1
  • Samba » Rsync » Version: 3.4.2
    cpe:2.3:a:samba:rsync:3.4.2
  • Samba » Rsync » Version: 3.4.3
    cpe:2.3:a:samba:rsync:3.4.3
  • Samba » Rsync » Version: 3.4.4
    cpe:2.3:a:samba:rsync:3.4.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved