{"id":"CVE-2022-34295","details":"totd before 1.5.3 does not properly randomize mesg IDs.","modified":"2026-07-09T02:36:03.885491Z","published":"2022-06-22T14:46:35Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34295.json"},"references":[{"type":"WEB","url":"http://www.hit.bme.hu/~lencse/publications/JCST-Apr14-2.pdf"},{"type":"WEB","url":"https://github.com/fwdillema/totd/releases/tag/1.5.3"},{"type":"WEB","url":"https://www.usenix.org/conference/usenixsecurity22/presentation/jeitner"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34295.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34295"},{"type":"FIX","url":"https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/fwdillema/totd","events":[{"introduced":"0"},{"fixed":"c5df5768b32e3c55d72a1aba9959c970cd50885d"},{"fixed":"afd8a10a6a21f82a70940d1b43cff48143250399"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"1.5.3"}],"cpe":"cpe:2.3:a:totd_project:totd:*:*:*:*:*:*:*:*"}}],"versions":["1.5.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34295.json","vanir_signatures_modified":"2026-07-09T02:36:03Z","vanir_signatures":[{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399","target":{"file":"read_config.c"},"signature_version":"v1","signature_type":"Line","id":"CVE-2022-34295-491776bc","digest":{"threshold":0.9,"line_hashes":["159679370702437602653894578270546545215","136159975752003045423399271876804921771","14547403288633119868656157507178035308","282979112930001199297099337509109321437"]}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399","target":{"function":"read_config","file":"read_config.c"},"signature_version":"v1","signature_type":"Function","id":"CVE-2022-34295-65a8716f","digest":{"function_hash":"57204155639659966210498881690094623673","length":4625}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/c5df5768b32e3c55d72a1aba9959c970cd50885d","target":{"function":"mesg_id","file":"ne_mesg.c"},"signature_version":"v1","signature_type":"Function","id":"CVE-2022-34295-781bba0d","digest":{"function_hash":"263419344595183339120741325264150784737","length":215}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/c5df5768b32e3c55d72a1aba9959c970cd50885d","target":{"function":"mesg_make_query","file":"ne_mesg.c"},"signature_version":"v1","signature_type":"Function","id":"CVE-2022-34295-95345abd","digest":{"function_hash":"106742488991596349092524847096480041375","length":1082}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399","target":{"file":"ne_mesg.c"},"signature_version":"v1","signature_type":"Line","id":"CVE-2022-34295-96977e77","digest":{"threshold":0.9,"line_hashes":["61646551764863517576440019530385466126","289697953463138747112607951075931338360","318079254785502727217532816873997001835","306859702589601399193881789598627033196","228072173795320730768654364986462919854","159606598143795199532473319263364548520","7007962833279729524347726679278021161","288970972668730710536270930346472581167","115286980837622636160160908490198562085","310926611818437475920896456029344393896","339374527244820066846146570220967222522","296071246346452691819043519009088869714","73536373630930430408397936962159157578","69305052895216580490221191249521846034","174599362385052543372621484046623288634","93948174051002978267304569087575562994","44680726015935663478033077275854658614","95936459911564354079804169849589254405","214635332510081205683444409968810440661","214006325683425311079984064973614736808","41178617295172978391561557104117156488"]}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/c5df5768b32e3c55d72a1aba9959c970cd50885d","target":{"file":"ne_mesg.c"},"signature_version":"v1","signature_type":"Line","id":"CVE-2022-34295-a75c9d89","digest":{"threshold":0.9,"line_hashes":["61646551764863517576440019530385466126","289697953463138747112607951075931338360","318079254785502727217532816873997001835","306859702589601399193881789598627033196","228072173795320730768654364986462919854","159606598143795199532473319263364548520","7007962833279729524347726679278021161","288970972668730710536270930346472581167","115286980837622636160160908490198562085","310926611818437475920896456029344393896","339374527244820066846146570220967222522","296071246346452691819043519009088869714","73536373630930430408397936962159157578","69305052895216580490221191249521846034","174599362385052543372621484046623288634","93948174051002978267304569087575562994","44680726015935663478033077275854658614","95936459911564354079804169849589254405","214635332510081205683444409968810440661","214006325683425311079984064973614736808","41178617295172978391561557104117156488"]}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399","target":{"function":"mesg_id","file":"ne_mesg.c"},"signature_version":"v1","signature_type":"Function","id":"CVE-2022-34295-bc0e239e","digest":{"function_hash":"263419344595183339120741325264150784737","length":215}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/afd8a10a6a21f82a70940d1b43cff48143250399","target":{"function":"mesg_make_query","file":"ne_mesg.c"},"signature_version":"v1","signature_type":"Function","id":"CVE-2022-34295-d45abc82","digest":{"function_hash":"106742488991596349092524847096480041375","length":1082}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/c5df5768b32e3c55d72a1aba9959c970cd50885d","target":{"file":"read_config.c"},"signature_version":"v1","signature_type":"Line","id":"CVE-2022-34295-dee8c0bc","digest":{"threshold":0.9,"line_hashes":["159679370702437602653894578270546545215","136159975752003045423399271876804921771","14547403288633119868656157507178035308","282979112930001199297099337509109321437"]}},{"deprecated":false,"source":"https://github.com/fwdillema/totd/commit/c5df5768b32e3c55d72a1aba9959c970cd50885d","target":{"function":"read_config","file":"read_config.c"},"signature_version":"v1","signature_type":"Function","id":"CVE-2022-34295-f8525452","digest":{"function_hash":"57204155639659966210498881690094623673","length":4625}}]}}],"schema_version":"1.7.5"}