CVE-2014-8242

Опубликовано: 26 окт. 2015

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/28/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/08/05/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/13/2
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1126712
Issue Tracking
Third Party Advisory
https://github.com/librsync/librsync/issues/5
Patch
Third Party Advisory
https://github.com/librsync/librsync/releases/tag/v1.0.0
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201605-04
Third Party Advisory
https://www.miknet.net/security/optimizing-birthday-attack/
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/28/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/08/05/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/13/2
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1126712
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:librsync_project:librsync:*:*:*:*:*:*:*:*

Версия до 1.0.0 (исключая)

EPSS

Процентиль: 87%

0.02939

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2014-8242

ubuntu

около 11 лет назад

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

CVE-2014-8242

debian

около 11 лет назад

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, w ...

GHSA-v3pp-49w5-gwmv

github

больше 4 лет назад

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

ALT-PU-2022-1770

altlinux

больше 4 лет назад

ALT-PU-2022-1770: package `librsync` update to version 2.3.2-alt2

ALT-PU-2022-1299

altlinux

больше 4 лет назад

ALT-PU-2022-1299: package `librsync` update to version 2.3.2-alt1

EPSS

Процентиль: 87%

0.02939

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-310