Radius

radius

Vendor: Gnu • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-4181 1Gnu 1Radius Apr 23, 2026 Nov 28, 2006 N/A· v4 N/A· v3 10.0 HIGH· v2 Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2004-0849 1Gnu 1Radius Apr 16, 2026 Dec 23, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of servic...Show more Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.Show less
CVE-2004-0576 1Gnu 1Radius Apr 16, 2026 Dec 6, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID.
CVE-2004-0131 1Gnu 1Radius Apr 16, 2026 Mar 3, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and n...Show more The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.Show less
CVE-2001-1377 11Freeradius GnuIcradius+8 more 11Freeradius IcradiusOpenradius+8 more Apr 16, 2026 Mar 4, 2002 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
CVE-2001-1376 12Ascend FreeradiusGnu+9 more 12Freeradius IcradiusOpenradius+9 more Apr 16, 2026 Mar 4, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.