Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

Vulnerability Intelligence

Customers

Vulnerability IntelligenceCVE-2014-8242

CVE-2014-8242

UNKNOWN

librsync before 1

Published Oct 26, 2015

Modified 1 years ago

Details

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

References

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html

ADVISORY

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html

ADVISORY

http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html

WEB

http://www.openwall.com/lists/oss-security/2014/07/28/1

WEB

http://www.openwall.com/lists/oss-security/2014/08/05/5

WEB

http://www.openwall.com/lists/oss-security/2014/10/13/2

WEB

https://bugzilla.redhat.com/show_bug.cgi?id=1126712

WEB

https://github.com/librsync/librsync/issues/5

WEB

https://github.com/librsync/librsync/releases/tag/v1.0.0

ADVISORY

https://security.gentoo.org/glsa/201605-04

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2014-8242

WEB

https://www.miknet.net/security/optimizing-birthday-attack/

CVSS Analysis

CVSS v2.0

5.8

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

PartialA:P

5.8/AV:N/AC:M/Au:N/C:N/I:P/A:P

Ecosystems

Timeline

PublishedOct 26, 2015

ModifiedAug 6, 2024

CVE-2014-8242 | Mondoo Vulnerability Intelligence