Samba Rsync any version

rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error

Rsync < 3.4.3 Out-of-Bounds Array Read via recv_files()

rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping

rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive

rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping

Rsync: rsync server leaks arbitrary client files

Rsync < 3.4.3 Authorization Bypass via Hostname Resolution

rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling

rsync < 3.5.0 Symlink Race Condition Information Disclosure

rsync < 3.5.0 Symlink Race Condition via --remove-source-files

Rsync < 3.4.3 Off-by-One Stack Write via HTTP Proxy

rsync, when running in daemon mode, does not properly call setgroups before dropping privileges, which could provide supplemental group privileges to local users, who could then read certain files that would otherwise be disallowed.