FR
Product
Freeradius
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 15Medium 3Low 0
Watch
Add Freeradius to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11235 | 9.8 | Apr 22 | FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve… Affected: before 3.0.19 |
| CVE-2019-11234 | 9.8 | Apr 22 | FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497 Affected: before 3.0.19 |
| CVE-2017-10984 | 9.8 | Jul 17 | An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +9 more |
| CVE-2017-10979 | 9.8 | Jul 17 | An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly… Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +24 more |
| CVE-2017-9148 | 9.8 | May 29 | The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an… Affected: 2.1.1; 2.1.2; 2.1.3; 2.1.4; 2.1.6; 2.1.7; +15 more |
| CVE-2024-3596 | 9.0 | Jul 9 | RADIUS Protocol under RFC2865 is vulnerable to forgery attacks. Affected: before 3.0.27 |
Showing 6