CERT24CVE-2026-53794 — rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic ErrorLoading data…
CERT24Threat Observatory
Period

CVE-2026-53794 — rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error

rsync before version 3.5.0 contains a logic error in --max-alloc handling. Setting --max-alloc=0 disables allocation sanity checks entirely, potentially allowing the receiver to attempt unbounded memory allocations and causing a denial of service.

← Back to intelligence

CVE-2026-53794 — rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error

rsync before version 3.5.0 contains a logic error in --max-alloc handling. Setting --max-alloc=0 disables allocation sanity checks entirely, potentially allowing the receiver to attempt unbounded memory allocations and causing a denial of service.