Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-8242HistoryOct 26, 2015 - 5:59 p.m.
CVE-2014-8242
2015-10-2617:59:00
Debian Security Bug Tracker
security-tracker.debian.org
11
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
EPSS
0.007
Percentile
79.9%
librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | librsync | < 2.0.2-1 | librsync_2.0.2-1_all.deb |
| Debian | 11 | all | librsync | < 2.0.2-1 | librsync_2.0.2-1_all.deb |
| Debian | 999 | all | librsync | < 2.0.2-1 | librsync_2.0.2-1_all.deb |
| Debian | 13 | all | librsync | < 2.0.2-1 | librsync_2.0.2-1_all.deb |
Related
fedora
fedora
[SECURITY] Fedora 21 Update: librsync-1.0.0-1.fc21
2015-03-19 18:44:40
[SECURITY] Fedora 22 Update: duplicity-0.6.25-3.fc22
2015-03-09 08:18:48
[SECURITY] Fedora 20 Update: csync2-1.34-15.fc20
2015-03-19 18:43:22
ubuntucve
ubuntucve
CVE-2014-8242
2015-10-26 00:00:00
nessus
nessus
FreeBSD : librsync -- collision vulnerability (b22b016b-b633-11e5-83ef-14dae9d210b8)
2016-01-11 00:00:00
Fedora 21 : csync2-1.34-15.fc21 / duplicity-0.6.25-3.fc21 / librsync-1.0.0-1.fc21 / etc (2015-3497)
2015-03-20 00:00:00
Mandriva Linux Security Advisory : librsync (MDVSA-2015:204)
2015-04-28 00:00:00
openvas
openvas
Fedora Update for duplicity FEDORA-2015-2923
2015-07-07 00:00:00
Fedora Update for csync2 FEDORA-2015-2923
2015-07-07 00:00:00
Fedora Update for librsync FEDORA-2015-3366
2015-03-20 00:00:00
securityvulns
securityvulns
librsync weak permission
2015-05-05 00:00:00
[ MDVSA-2015:204 ] librsync
2015-05-05 00:00:00
mageia
mageia
Updated librsync packages fix security vulnerabilities
2015-04-15 12:01:28
cve
cve
CVE-2014-8242
2015-10-26 17:59:00
freebsd
freebsd
librsync -- collision vulnerability
2014-07-28 00:00:00
archlinux
archlinux
librsync: checksum collision
2015-03-16 00:00:00
prion
prion
Code injection
2015-10-26 17:59:00
nvd
nvd
CVE-2014-8242
2015-10-26 17:59:00
osv
osv
librsync-devel-1.0.0-2.8 on GA media
2024-06-15 00:00:00
rsync-3.1.2-1.5 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2014-8242
2015-10-26 17:00:00
gentoo
gentoo
rsync: Multiple vulnerabilities
2016-05-30 00:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:P/A:P
EPSS
0.007
Percentile
79.9%
Related for DEBIANCVE:CVE-2014-8242