Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-8342 Details

Description

Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:8.1 HIGHVector:CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://bugs.debian.org/861514 CVEExploitIssue TrackingPatchVDB Entry
https://github.com/Kozea/Radicale/blob/1.1.2/NEWS.rst CVERelease NotesThird Party Advisory
https://github.com/Kozea/Radicale/commit/059ba8dec1f22ccbeab837e288b3833a099cee2d CVEPatchThird Party Advisory
https://github.com/Kozea/Radicale/commit/190b1dd795f0c552a4992445a231da760211183b CVEPatchThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/04/msg00019.html CVE

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')[email protected]

Affected Products

ProductVersions
radicale radicale
<= 1.1.1
2.0.0 rc1

CPE

  • cpe:2.3:a:radicale:radicale:*:*:*:*:*:*:*:*
  • cpe:2.3:a:radicale:radicale:2.0.0:rc1:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-8342
NVD Published Date:
Apr 30, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-8342 Details - Not Deferred