CVE-2026-43617

EUVD-2026-31013
Rsync version 3.4.2 and prior contain an authorization bypass vulnerability in the rsync daemon's hostname-based access control list enforcement when configured with chroot. Attackers can bypass hostname-based deny rules by controlling the PTR record for their source IP address, allowing connections from hostnames that administrators intended to deny when reverse DNS resolution fails and defaults to UNKNOWN.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.8 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 20.64%
Affected Products (NVD)
VendorProductVersion
sambarsync
𝑥
≤ 3.4.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
rsync
bookworm
3.2.7-1+deb12u6
fixed
bookworm (security)
3.2.7-1+deb12u5
fixed
bullseye
vulnerable
bullseye (security)
3.2.3-4+deb11u4
fixed
forky
3.4.4+ds1-1
fixed
sid
3.4.4+ds1-1
fixed
trixie
3.4.1+ds1-5+deb13u4
fixed
trixie (security)
3.4.1+ds1-5+deb13u3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
rsync
bionic
Fixed 3.1.2-2.1ubuntu1.6+esm3
released
focal
Fixed 3.1.3-8ubuntu0.9+esm1
released
jammy
Fixed 3.2.7-0ubuntu0.22.04.6
released
noble
Fixed 3.2.7-1ubuntu1.4
released
questing
Fixed 3.4.1+ds1-5ubuntu1.2
released
resolute
Fixed 3.4.1+ds1-7ubuntu0.2
released
trusty
Fixed 3.1.0-2ubuntu0.4+esm3
released
xenial
Fixed 3.1.1-3ubuntu1.3+esm5
released
Azure Linux logo
Azure Linux Releases
Azure Package
Release
rsync
Azure Linux 3.0
0:3.4.3-1.azl3
fixed
Common Weakness Enumeration
Vulnerability Media Exposure
References
https://github.com/RsyncProject/rsync/releases/tag/v3.4.3
https://github.com/RsyncProject/rsync/security/advisories/GHSA-rjfm-3w2m-jf4f
https://www.vulncheck.com/advisories/rsync-authorization-bypass-via-hostname-resolution