Skip to content
OpenAdvisories
High USN-9084-1 1 CVE

radicale vulnerability

Published Nov 12, 2026 · Updated Nov 13, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Radicale did not delay failed authentication
attempts when using htpasswd authentication. A remote attacker could
possibly use this issue to obtain user passwords through timing or
brute-force attacks.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS radicale 1.1.1-1ubuntu0.1~esm1

Vulnerabilities 1

  • High 8.1
    CVE-2017-8342

    Radicale is vulnerable to timing oracles and simple bruteforce attacks

    Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.

    radicale radicale radicale Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2017-8342