Summary
It was discovered that libpam-radius-auth incorrectly handled certain long
passwords. A remote attacker could possibly use this issue to cause
libpam-radius-auth to crash, resulting in a denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libpam-radius-auth | 1.3.17-0ubuntu4.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libpam-radius-auth | 1.3.17-0ubuntu5.18.04.1 |
Vulnerabilities 1
-
Unscored —
add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is…
References
-
report
https://ubuntu.com/security/CVE-2015-9542