Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2014-8242
HistoryOct 26, 2015 - 12:00 a.m.

CVE-2014-8242

2015-10-2600:00:00
ubuntu.com
ubuntu.com
10

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.007

Percentile

79.9%

JSON

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which
makes it easier for remote attackers to modify transmitted data via a
birthday attack.

Bugs

Notes

Author Note
ebarretto Too intrusive to backport
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibrsync< anyUNKNOWN
ubuntu16.04noarchlibrsync< anyUNKNOWN

Related

fedora 12
nessus 9
openvas 15
debiancve 1
freebsd 1
archlinux 1
prion 1
securityvulns 2
mageia 1
cve 1
nvd 1
osv 2
cvelist 1
gentoo 1
fedora
fedora
[SECURITY] Fedora 21 Update: librsync-1.0.0-1.fc21
2015-03-19 18:44:40
[SECURITY] Fedora 22 Update: duplicity-0.6.25-3.fc22
2015-03-09 08:18:48
[SECURITY] Fedora 21 Update: rdiff-backup-1.2.8-14.fc21
2015-03-19 18:44:40
nessus
nessus
FreeBSD : librsync -- collision vulnerability (b22b016b-b633-11e5-83ef-14dae9d210b8)
2016-01-11 00:00:00
Fedora 21 : csync2-1.34-15.fc21 / duplicity-0.6.25-3.fc21 / librsync-1.0.0-1.fc21 / etc (2015-3497)
2015-03-20 00:00:00
Fedora 22 : csync2-1.34-15.fc22 / duplicity-0.6.25-3.fc22 / librsync-1.0.0-1.fc22 / etc (2015-2923)
2015-03-10 00:00:00
openvas
openvas
Fedora Update for duplicity FEDORA-2015-2923
2015-07-07 00:00:00
Fedora Update for duplicity FEDORA-2015-3366
2015-03-20 00:00:00
Fedora Update for duplicity FEDORA-2015-3497
2015-03-20 00:00:00
debiancve
debiancve
CVE-2014-8242
2015-10-26 17:59:00
freebsd
freebsd
librsync -- collision vulnerability
2014-07-28 00:00:00
archlinux
archlinux
librsync: checksum collision
2015-03-16 00:00:00
prion
prion
Code injection
2015-10-26 17:59:00
securityvulns
securityvulns
librsync weak permission
2015-05-05 00:00:00
[ MDVSA-2015:204 ] librsync
2015-05-05 00:00:00
mageia
mageia
Updated librsync packages fix security vulnerabilities
2015-04-15 12:01:28
cve
cve
CVE-2014-8242
2015-10-26 17:59:00
nvd
nvd
CVE-2014-8242
2015-10-26 17:59:00
osv
osv
librsync-devel-1.0.0-2.8 on GA media
2024-06-15 00:00:00
rsync-3.1.2-1.5 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2014-8242
2015-10-26 17:00:00
gentoo
gentoo
rsync: Multiple vulnerabilities
2016-05-30 00:00:00

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

EPSS

0.007

Percentile

79.9%

JSON
Related for UB:CVE-2014-8242
fedora12nessus9openvas15debiancve1freebsd1archlinux1prion1securityvulns2mageia1cve1nvd1osv2cvelist1gentoo1