← Back

Radius

radius

Vendor: Lucent • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
11Freeradius
GnuIcradius+8 more
11Freeradius
IcradiusOpenradius+8 more
Apr 16, 2026
Mar 4, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
12Ascend
FreeradiusGnu+9 more
12Freeradius
IcradiusOpenradius+9 more
Apr 16, 2026
Mar 4, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.
2Lucent
Merit
2Radius
Radius
Apr 16, 2026
Jul 21, 2001
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.
2Lucent
Simon Horms
2Radius
Radius
Apr 16, 2026
Jul 13, 2001
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
2Lucent
Simon Horms
2Radius
Radius
Apr 16, 2026
Jul 6, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into...Show more
Format string vulnerabilities in Livingston/Lucent RADIUS before 2.1.va.1 may allow local or remote attackers to cause a denial of service and possibly execute arbitrary code via format specifiers that are injected into log messages.Show less