Threats tagged 'ghsa-56w4-j8c7-xvrw'

A denial of service vulnerability exists in rsync versions through 3.5.1 in the delta-transfer sender's hash_search() function. Malicious receivers can exploit this by supplying crafted weak checksums that cause excessive CPU usage on the sender side, leading to resource exhaustion. This affects unauthenticated attackers pulling data from a public daemon module.