CVE-2014-8242

Published: Oct 26, 2015Modified: May 6, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

Affected (1)

Products: Librsync Project: Librsync

Librsync Project

1 product

Librsync

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Librsync Project Librsync	version < 1.0.0

Related CWEs

CWE-310

References (24)

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/07/28/1

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/08/05/5

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/10/13/2

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1126712

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://github.com/librsync/librsync/issues/5

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/librsync/librsync/releases/tag/v1.0.0

Source: cve@mitre.org

PatchThird Party Advisory

https://security.gentoo.org/glsa/201605-04

Source: cve@mitre.org

Third Party Advisory

https://www.miknet.net/security/optimizing-birthday-attack/

Source: cve@mitre.org

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/151105.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152355.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152366.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-10/msg00034.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/07/28/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/08/05/5

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2014/10/13/2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1126712

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party Advisory

https://github.com/librsync/librsync/issues/5

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/librsync/librsync/releases/tag/v1.0.0

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://security.gentoo.org/glsa/201605-04

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.miknet.net/security/optimizing-birthday-attack/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.