OVER 660K RSYNC SERVERS EXPOSED TO CODE EXECUTION ATTACKS

Summary from the TLDR InfoSec newsletter

Google Cloud and other independent security researchers discovered 6 new vulnerabilities in rsync, one of which is critical. When two of the vulnerabilities are chained together, attackers can achieve unauthenticated remote code execution on default installations of rsyncd. BleepingComputer detected 660K exposed rsync servers on Shodan but did not verify if they were vulnerable.