CVE-2014-8242

Medium

Description

librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data via a birthday attack.

SeverityMedium

CVSS5.8

Exploit probability—

ProductLibrsync

PublishedOct 26, 2015

First seenOct 26, 2015

How to fix

Update

librsync_project librsync1.0.0 or later

Vendor advisories

security.gentoo.org/glsa/201605-04

Affected products

Product	Affected versions	Fixed in
librsync_project librsync	v < 1.0.0	1.0.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.