CVE-2013-0342

Published Dec 9, 2019 CVSS 3.1 · 4.3 Medium EPSS 1.5% KEV · Not listed
Description
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2019-0109 The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.
Github GHSA Github GHSA GHSA-w4px-9pgm-p2f3 pyrad uses sequential packet IDs
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 2:25 PM
Reserved
Dec 6, 2012, 12:00 AM
Status
Modified
Published
Dec 9, 2019, 9:15 PM
Modified
Jun 16, 2026, 11:49 PM