Skip to content
OpenAdvisories
Unscored DLA-977-1 3 CVEs

freeradius - security update

Published Jun 5, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 freeradius 2.1.12+dfsg-1.2+deb7u1

Vulnerabilities 3

  • Unscored —
    CVE-2014-2015

    Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x…

    freeradius Debian
  • Unscored —
    CVE-2015-4680

    FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

    freeradius Debian
  • Unscored —
    CVE-2017-9148

    The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before…

    freeradius Debian