Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 51

Export CSV
CVE-2022-41861

freeradius: Crash on invalid abinary data

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS 3.1 · 6.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2022-41860

freeradius: Crash on unknown option in EAP-SIM

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2022-41859

freeradius: Information leakage in EAP-PWD

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2017-10987

freeradius: Buffer over-read in fr_dhcp_decode_suboptions()

An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2015-8762

freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

CVSS 3.0 · 5.9 Medium EPSS 1.6% KEV · Not listed
Vendors
Freeradius
Products
Freeradius
CVE-2015-8763

freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.

CVSS 3.0 · 8.1 High EPSS 1.2% KEV · Not listed
Vendors
Freeradius
Products
Freeradius
CVE-2015-8764

freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.

CVSS 3.0 · 8.1 High EPSS 1.1% KEV · Not listed
Vendors
Freeradius
Products
Freeradius
CVE-2017-10978

freeradius: Out-of-bounds read/write due to improper output buffer size check in make_secret()

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.

CVSS 3.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Debian Freeradius Redhat
Products
Debian Linux Freeradius Enterprise Linux and 6 more
CVE-2017-10979

freeradius: Out-of-bounds write in rad_coalesce()

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 7.0% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2017-10982

freeradius: Out-of-bounds read in fr_dhcp_decode_options()

An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service.

CVSS 3.0 · 7.5 High EPSS 3.8% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2017-10983

freeradius: Out-of-bounds read in fr_dhcp_decode() when decoding option 63

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service.

CVSS 3.0 · 7.5 High EPSS 3.4% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2017-10984

freeradius: Out-of-bounds write in data2vp_wimax()

An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.

CVSS 3.0 · 9.8 Critical EPSS 6.4% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2017-10985

freeradius: Infinite loop and memory exhaustion with 'concat' attributes

An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.

CVSS 3.0 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2017-9148

freeradius: TLS resumption authentication bypass

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

CVSS 3.0 · 9.8 Critical EPSS 3.9% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux
CVE-2014-2015

freeradius: stack-based buffer overflow flaw in rlm_pap module

Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.

CVSS 2.0 · 7.5 High EPSS 3.9% KEV · Not listed
Vendors
Freeradius Redhat
Products
Freeradius Enterprise Linux