rsync 3.5.2 released to fix a CPU exhaustion flaw
PATCHredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
rsync 3.5.2 fixes a flaw that allows a connecting client to drive CPU exhaustion on the server through checksum computations that serve no purpose. The release also adds a mechanism to deprioritise a transfer for CPU and disk access. The article does not provide a CVE identifier or the affected version range; defenders running rsync servers should upgrade to 3.5.2.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Upgrade rsync to version 3.5.2 on systems that run it, especially servers accepting connections from clients.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Help Net Security