freeradius vulnerabilities (Alpine)

7 vulnerabilities.

• freeradius Alpine RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. CVE-2024-3596 Public exploitFix available EPSS 14.9% 9.0 CriticalJuly 9, 2024
• freeradius Alpine In freeradius, the EAP-PWD function compute_password_element() leaks information about the... CVE-2022-41859 Fix available 7.5 HighDecember 27, 2022
• freeradius Alpine A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed... CVE-2022-41861 Fix available 6.5 MediumDecember 14, 2022
• freeradius Alpine In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to... CVE-2022-41860 Fix available 7.5 HighDecember 14, 2022
• freeradius Alpine It was discovered freeradius up to and including version 3.0.19 does not correctly configure... CVE-2019-10143 Fix availableDisputed 6.4 MediumMay 24, 2019
• freeradius Alpine FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is... CVE-2019-11235 Fix available 9.8 CriticalApril 16, 2019
• freeradius Alpine FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a ... CVE-2019-11234 Fix available 9.8 CriticalApril 16, 2019