CVE-2025-59354 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, includin…
Medium CVSS: 5.5

CVE-2025-59354

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the DragonFly2 uses a variety of hash functions, including the MD5 hash, for downloaded files. This allows attackers to replace files with malicious ones that have a colliding hash. This vulnerability is fixed in 2.1.0.
Vendor
Linuxfoundation
Product
Dragonfly
CWE
CWE-328
Yayın Tarihi
2025-09-17 20:15:38
Güncelleme
2025-09-18 20:08:13
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-328 Dragonfly MEDIUM Linuxfoundation 2025

Referanslar

https://github.com/dragonflyoss/dragonfly/blob/main/docs/security/dragonfly-comprehensive-report-2023.pdf https://github.com/dragonflyoss/dragonfly/security/advisories/GHSA-hx2h-vjw2-8r54