FR
Product
Freeradius
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 15Medium 3Low 0
Watch
Add Freeradius to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-8764 | 8.1 | Mar 27 | Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +3 more |
| CVE-2015-8763 | 8.1 | Mar 27 | The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +3 more |
| CVE-2022-41860 | 7.5 | Jan 17 | In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries Affected: 0.9.3 through 3.0.25 |
| CVE-2022-41859 | 7.5 | Jan 17 | In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline… Affected: before 3.0.0 |
| CVE-2019-17185 | 7.5 | Mar 21 | In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes Affected: 3.0.0 before 3.0.20 |
| CVE-2017-10987 | 7.5 | Jul 17 | An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +9 more |
| CVE-2017-10986 | 7.5 | Jul 17 | An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +9 more |
| CVE-2017-10985 | 7.5 | Jul 17 | An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +9 more |
| CVE-2017-10983 | 7.5 | Jul 17 | An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +34 more |
| CVE-2017-10982 | 7.5 | Jul 17 | An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +24 more |
| CVE-2017-10981 | 7.5 | Jul 17 | An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +24 more |
| CVE-2017-10980 | 7.5 | Jul 17 | An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.0.2; 2.0.3; +24 more |
| CVE-2017-10978 | 7.5 | Jul 17 | An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service Affected: 2.0 before 2.2.10; 3.0.0 before 3.0.15 |
| CVE-2015-4680 | 7.5 | Apr 5 | FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.0.4; 3.0.5; +11 more |
| CVE-2019-10143 | 7.0 | May 24 | It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to… Affected: through 3.0.19 |
Showing 15