FreeRADIUS 3.0.25

CPE Details

FreeRADIUS 3.0.25
freeradius
freeradius
3.0.25
2024-02-26
17h49 +00:00
2024-02-26
17h49 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:freeradius:freeradius:3.0.25:*:*:*:*:*:*:*

Informations

Vendor

freeradius

Product

freeradius

Version

3.0.25

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-3596 2024-07-09 12h02 +00:00 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
9
Critical
CVE-2022-41860 2023-01-16 23h00 +00:00 In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
7.5
High
CVE-2022-41861 2023-01-16 23h00 +00:00 A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
6.5
Medium
CVE-2011-4966 2013-03-12 22h00 +00:00 modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
6
CVE-2002-0318 2003-04-02 03h00 +00:00 FreeRADIUS RADIUS server allows remote attackers to cause a denial of service (CPU consumption) via a flood of Access-Request packets.
5