CVE-2025-67901
openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a length of zero for block data, because …
Published: 2025-12-14 · CVSS: 5.3 · CVSS 3.1
openrsync through 0.5.0, as used in OpenBSD through 7.8 and on other platforms, allows a client to cause a server SIGSEGV by specifying a length of zero for block data, because the relationship between p->rem and p->len is not checked.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7