Skip to content
OpenAdvisories
High DLA-934-1 1 CVE

radicale - security update

Published May 9, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 radicale 0.7-1.1+deb7u2

Vulnerabilities 1

  • High 8.1
    CVE-2017-8342

    Radicale is vulnerable to timing oracles and simple bruteforce attacks

    Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.

    radicale radicale radicale Debian Ubuntu PyPI