Summary
USN-4290-1 fixed a vulnerability in libpam-radius-auth. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that libpam-radius-auth incorrectly handled certain long
passwords. A remote attacker could possibly use this issue to cause
libpam-radius-auth to crash, resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libpam-radius-auth | 1.3.17-0ubuntu4+esm1 |
Vulnerabilities 1
-
Unscored —
add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is…
References
-
report
https://ubuntu.com/security/CVE-2015-9542