Medium [CVE-2026-70462] Denial of Service via signed integer overflow in I/O timeout
This medium-severity Red Hat Linux advisory covers CVE-2026-70462 affecting Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSG_IO_TIMEOUT messages carrying non-positive (zero or negative) values.
Attackers can craft malicious MSG_IO_TIMEOUT messages that cause the timeout variable to wrap to a non-positive value, preventing the timeout check from firing and enabling idle or stalled connections to hold daemon slots indefinitely, leading to resource exhaustion. A flaw was found in rsync.
A remote attacker can exploit a signed integer overflow vulnerability in the I/O timeout implementation by sending specially crafted messages. These messages can disable connection timeouts, causing idle or stalled connections to persist indefinitely.
This leads to resource exhaustion, preventing legitimate users from accessing the rsync service and resulting in a denial of service. This is a Moderate denial of service flaw in rsync, where a remote, unauthenticated attacker can exhaust system resources.
The impact is limited to denial of service and does not allow for arbitrary code execution or data compromise. Red Hat severity: Moderate — CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
Weakness: CWE-190.
- < 3.1.0
- < 3.5.0
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Mitigation checklist
- Only run rsync against trusted remotes. Restrict which hosts local rsync and rsync-bpc may reach. A peer MSG_IO_TIMEOUT can disable or overflow the client’s --timeout; daemon hosts allow does not bind this.
Official advisory · high-confidence parse· fetched 9 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.