asu vulnerabilities

1 known vulnerability in asu from OpenWrt. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  asu: Use of Weak Hash

  CVE-2024-54143Dec 6, 2024OpenWrtEPSS 1.84%

  openwrt/asu is an image on demand server for OpenWrt based distributions. The request hashing mechanism truncates SHA-256 hashes to only 12 characters. This significantly reduces entropy, making it feasible for an attacker to generate collisions. By exploiting