The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789786148 advisory.

  - rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping     interface that allows local attackers to forge protocol messages by creating user or group names     containing newline characters. Attackers can inject malicious newline characters into names communicated     over the pipe-based line-oriented protocol to cause the rsync daemon to process attacker-influenced data     as legitimate protocol input, corrupting uid/gid mapping logic. (CVE-2026-53788)

  - rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape     the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary     when the module root contains a /./ boundary marker. Attackers can exploit improper handling of the /./     notation or forge delta-basis transfers referencing xname paths that cross the /./ boundary to gain     unauthorized read or write access to files outside the module's subtree. (CVE-2026-53793)

  - rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS     certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by     presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to validate     server TLS certificates against a trusted CA or verify certificate hostname matching to decrypt or tamper     with rsync session content without detection by the client. (CVE-2026-70454)

  - rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated     remote attackers to exhaust daemon connection slots by stalling the handshake process before or after     module selection without triggering the I/O timeout. Attackers can open many simultaneous connections and     trickle data at the minimum rate to avoid timeout, or stall entirely before module selection where no     timeout applies, consuming all available connection slots and denying service to legitimate clients.
    (CVE-2026-70464)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1789786148)

critical Nessus Plugin ID 352780

Version 1.3