freeradius freeradius vulnerabilities and exploits

(subscribe to this query)

modules/rlm_unix/rlm_unix.c in FreeRADIUS prior to 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.

Freeradius Freeradius Freeradius Freeradius 0.1 Freeradius Freeradius 0.2 Freeradius Freeradius 0.3 Freeradius Freeradius 0.4 Freeradius Freeradius 0.5 Freeradius Freeradius 0.6 Freeradius Freeradius 0.7 Freeradius Freeradius 0.7.1 Freeradius Freeradius 0.8 Freeradius Freeradius 0.8.1 Freeradius Freeradius 0.9

The rad_decode function in FreeRADIUS prior to 1.1.8 allows remote malicious users to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 up to and including 8.11. NOTE: this ...

Freeradius Freeradius Freeradius Freeradius 0.2 Freeradius Freeradius 0.3 Freeradius Freeradius 0.4 Freeradius Freeradius 0.5 Freeradius Freeradius 0.8 Freeradius Freeradius 0.8.1 Freeradius Freeradius 0.9 Freeradius Freeradius 0.9.1 Freeradius Freeradius 0.9.2 Freeradius Freeradius 0.9.3 Freeradius Freeradius 1.0.0

1 EDB exploit

The EAP-PWD module in FreeRADIUS 3.0 up to and including 3.0.8 allows remote malicious users to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

Freeradius Freeradius 3.0.0 Freeradius Freeradius 3.0.1 Freeradius Freeradius 3.0.2 Freeradius Freeradius 3.0.3 Freeradius Freeradius 3.0.4 Freeradius Freeradius 3.0.5 Freeradius Freeradius 3.0.6 Freeradius Freeradius 3.0.7 Freeradius Freeradius 3.0.8

The EAP-PWD module in FreeRADIUS 3.0 up to and including 3.0.8 allows remote malicious users to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.

Freeradius Freeradius 3.0.0 Freeradius Freeradius 3.0.1 Freeradius Freeradius 3.0.2 Freeradius Freeradius 3.0.3 Freeradius Freeradius 3.0.4 Freeradius Freeradius 3.0.5 Freeradius Freeradius 3.0.6 Freeradius Freeradius 3.0.7 Freeradius Freeradius 3.0.8

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 up to and including 3.0.8, which triggers a buffer overflow.

Freeradius Freeradius 3.0.0 Freeradius Freeradius 3.0.1 Freeradius Freeradius 3.0.2 Freeradius Freeradius 3.0.3 Freeradius Freeradius 3.0.4 Freeradius Freeradius 3.0.5 Freeradius Freeradius 3.0.6 Freeradius Freeradius 3.0.7 Freeradius Freeradius 3.0.8

The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x prior to 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote malicious users to cause a denial of service (daemon ...

Freeradius Freeradius 2.1.0 Freeradius Freeradius 2.1.1 Freeradius Freeradius 2.1.2 Freeradius Freeradius 2.1.3 Freeradius Freeradius 2.1.4 Freeradius Freeradius 2.1.6 Freeradius Freeradius 2.1.7 Freeradius Freeradius 2.1.8 Freeradius Freeradius 2.1.9

FreeRADIUS 2.2.x prior to 2.2.8 and 3.0.x prior to 3.0.9 does not properly check revocation of intermediate CA certificates.

Freeradius Freeradius 3.0.0 Freeradius Freeradius 3.0.1 Freeradius Freeradius 3.0.2 Freeradius Freeradius 3.0.3 Freeradius Freeradius 3.0.4 Freeradius Freeradius 3.0.5 Freeradius Freeradius 3.0.6 Freeradius Freeradius 3.0.7 Freeradius Freeradius 3.0.8 Freeradius Freeradius 2.2.0 Freeradius Freeradius 2.2.1 Freeradius Freeradius 2.2.2

Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote malicious users to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.

Freeradius Freeradius 1.0.0 Freeradius Freeradius 1.0.1 Freeradius Freeradius 1.0.2 Freeradius Freeradius 1.0.3 Freeradius Freeradius 1.0.4 Freeradius Freeradius 1.0.5 Freeradius Freeradius 1.1.0

FreeRADIUS prior to 1.0.1 allows remote malicious users to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.

Freeradius Freeradius 0.2 Freeradius Freeradius 0.3 Freeradius Freeradius 0.4 Freeradius Freeradius 0.5 Freeradius Freeradius 0.8 Freeradius Freeradius 0.8.1 Freeradius Freeradius 0.9 Freeradius Freeradius 0.9.1 Freeradius Freeradius 0.9.2 Freeradius Freeradius 0.9.3 Freeradius Freeradius 1.0.0 Redhat Enterprise Linux 3.0

Memory leak in FreeRADIUS prior to 1.0.1 allows remote malicious users to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.

Freeradius Freeradius 0.2 Freeradius Freeradius 0.3 Freeradius Freeradius 0.4 Freeradius Freeradius 0.5 Freeradius Freeradius 0.8 Freeradius Freeradius 0.8.1 Freeradius Freeradius 0.9 Freeradius Freeradius 0.9.1 Freeradius Freeradius 0.9.2 Freeradius Freeradius 0.9.3 Freeradius Freeradius 1.0.0 Redhat Enterprise Linux 3.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook