CVE-2026-43618

Medium

Elevated severity or exploit probability.

CVSS base

8.1 HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS — probability of exploitation (30 days)

0.8%

54.4th percentile

CISA KEV

Not listed

Weakness / dates

CWE-190

Published 2026-05-20 · modified 2026-09-01

CVSS breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector	N	Network
Attack Complexity	L	Low
Privileges Required	L	Low
User Interaction	N	None
Scope	U	Unchanged
Confidentiality	H	High
Integrity	N	None
Availability	H	High

Timeline

2026-05-20 — Published (NVD)
2026-09-01 — Last modified (NVD)

Description

Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is not checked for overflow, allowing a malicious sender to trigger an overflow that causes the receiver process to read and return data from outside the intended buffer bounds. Attackers can exploit this vulnerability to disclose process memory contents including environment variables, passwords, heap and stack data, and library memory pointers, significantly reducing ASLR effectiveness and facilitating further exploitation.

Affected

samba

References

Official: NVD · CVE.org