CVE-2014-8242

Опубликовано: 26 окт. 2015

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

Ссылки

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/28/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/08/05/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/13/2
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1126712
Issue Tracking
Third Party Advisory
https://github.com/librsync/librsync/issues/5
Patch
Third Party Advisory
https://github.com/librsync/librsync/releases/tag/v1.0.0
Patch
Third Party Advisory
https://security.gentoo.org/glsa/201605-04
Third Party Advisory
https://www.miknet.net/security/optimizing-birthday-attack/
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/07/28/1
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/08/05/5
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/10/13/2
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1126712
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:librsync_project:librsync:*:*:*:*:*:*:*:*

Версия до 1.0.0 (исключая)

EPSS

Процентиль: 84%

0.02282

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

CVE-2014-8242

ubuntu

больше 10 лет назад

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

CVE-2014-8242

debian

больше 10 лет назад

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, w ...

GHSA-v3pp-49w5-gwmv

github

больше 3 лет назад

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

SUSE-SU-2016:0176-1

suse-cvrf

около 10 лет назад

Security update for rsync

SUSE-SU-2016:0173-1

suse-cvrf

около 10 лет назад

Security update for rsync

EPSS

Процентиль: 84%

0.02282

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-310