Freeradius Freeradius vulnerabilities

• ietf rfc, broadcom brocade sannav, fabric operating system +478 more +480 more RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. CVE-2024-3596 Public exploitFix available EPSS 14.9% 9.0 CriticalJuly 9, 2024
• freeradius In freeradius, the EAP-PWD function compute_password_element() leaks information about the... CVE-2022-41859 Fix available 7.5 HighDecember 27, 2022
• freeradius A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed... CVE-2022-41861 Fix available 6.5 MediumDecember 14, 2022
• freeradius In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to... CVE-2022-41860 Fix available 7.5 HighDecember 14, 2022
• freeradius, opensuse leap +1 more In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to... CVE-2019-17185 Fix available 7.5 HighJanuary 5, 2020
• freeradius, opensuse leap, redhat enterprise linux +2 more In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the... CVE-2019-13456 Fix available 6.5 MediumDecember 3, 2019
• freeradius, fedoraproject fedora, redhat enterprise linux +2 more It was discovered freeradius up to and including version 3.0.19 does not correctly configure... CVE-2019-10143 Fix availableDisputed 6.4 MediumMay 24, 2019
• freeradius, canonical ubuntu linux, fedoraproject fedora +7 more +9 more FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is... CVE-2019-11235 Fix available 9.8 CriticalApril 16, 2019
• freeradius, canonical ubuntu linux, fedoraproject fedora +1 more +3 more FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a ... CVE-2019-11234 Fix available 9.8 CriticalApril 16, 2019
• freeradius An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in... CVE-2017-10987 Fix available 7.5 HighJuly 17, 2017
• freeradius An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()... CVE-2017-10986 Fix available 7.5 HighJuly 17, 2017
• freeradius An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion... CVE-2017-10985 Fix available 7.5 HighJuly 17, 2017
• freeradius An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" -... CVE-2017-10984 Fix available 9.8 CriticalJuly 17, 2017
• freeradius An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read... CVE-2017-10983 Fix available 7.5 HighJuly 17, 2017
• freeradius An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in... CVE-2017-10982 Fix available 7.5 HighJuly 17, 2017
• freeradius An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()... CVE-2017-10981 Fix available 7.5 HighJuly 17, 2017
• freeradius An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()"... CVE-2017-10980 Fix available 7.5 HighJuly 17, 2017
• freeradius An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" -... CVE-2017-10979 Fix available 9.8 CriticalJuly 17, 2017
• freeradius, debian linux, redhat enterprise linux desktop +5 more +7 more An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write... CVE-2017-10978 Fix available 7.5 HighJuly 17, 2017
• freeradius The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017... CVE-2017-9148 Fix available 9.8 CriticalMay 29, 2017
• freeradius Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer... CVE-2015-8764 8.1 HighMarch 27, 2017
• freeradius The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified... CVE-2015-8763 8.1 HighMarch 27, 2017
• freeradius The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of... CVE-2015-8762 5.9 MediumMarch 27, 2017
• freeradius, suse linux enterprise server, linux enterprise software development kit +2 more FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of... CVE-2015-4680 Fix available 7.5 HighJuly 28, 2015
• freeradius Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap... CVE-2014-2015 Fix available 7.5 HighFebruary 21, 2014
• freeradius modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user... CVE-2011-4966 Fix available 6.0 MediumMarch 12, 2013
• freeradius Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12,... CVE-2012-3547 Fix available 6.8 MediumSeptember 11, 2012
• freeradius The ocsp_check function in rlm_eap_tls.c in FreeRADIUS 2.1.11, when OCSP is enabled, does not... CVE-2011-2701 5.8 MediumAugust 4, 2011
• freeradius The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain... CVE-2010-3697 Fix available 4.3 MediumOctober 7, 2010
• freeradius The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds,... CVE-2010-3696 Fix available 4.3 MediumOctober 7, 2010
• freeradius The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of... CVE-2009-3111 Public exploitFix available EPSS 11.2% 5.0 MediumSeptember 9, 2009
• freeradius freeradius-dialupadmin in freeradius 2.0.4 allows local users to overwrite arbitrary files via a... CVE-2008-4474 Fix available 7.2 HighOctober 7, 2008
• freeradius Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service ... CVE-2007-2028 Fix available 5.0 MediumApril 13, 2007
• freeradius ** DISPUTED ** Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and... CVE-2007-0080 Fix availableDisputed 6.6 MediumJanuary 5, 2007
• freeradius Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass... CVE-2006-1354 Fix available 7.5 HighMarch 22, 2006
• freeradius Multiple buffer overflows in FreeRADIUS 1.0.3 and 1.0.4 allow remote attackers to cause denial of... CVE-2005-4746 Fix available 7.8 HighDecember 31, 2005
• freeradius SQL injection vulnerability in the rlm_sqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows... CVE-2005-4745 Fix available 7.5 HighDecember 31, 2005
• freeradius Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and... CVE-2005-4744 Fix available 6.4 MediumDecember 31, 2005
• freeradius Buffer overflow in the sql_escape_func function in the SQL module for FreeRADIUS 1.0.2 and... CVE-2005-1455 Fix available 7.5 HighMay 19, 2005
• freeradius SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2... CVE-2005-1454 Fix available 7.5 HighMay 19, 2005
• freeradius, redhat enterprise linux, fedora core +2 more Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service ... CVE-2004-0961 Fix available 5.0 MediumOctober 20, 2004
• freeradius, redhat enterprise linux, fedora core +2 more FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via... CVE-2004-0960 Fix available 5.0 MediumOctober 20, 2004
• freeradius FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by... CVE-2004-0938 Fix available 5.0 MediumOctober 16, 2004
• freeradius rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service ... CVE-2003-0967 Public exploitFix available 5.0 MediumDecember 2, 2003
• freeradius FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption)... CVE-2002-0318 5.0 MediumJune 25, 2002
• gnu radius, freeradius, icradius +3 more +5 more Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific... CVE-2001-1377 5.0 MediumMarch 4, 2002
• ascend radius, freeradius, icradius +3 more +5 more Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote... CVE-2001-1376 7.5 HighMarch 4, 2002