Skip to content
OpenAdvisories

Package · Debian

radsecproxy

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.0
    CVE-2021-32642

    Missing input validation in dynamic discovery example scripts.

    radsecproxy is a generic RADIUS proxy that supports both UDP and TLS (RadSec) RADIUS transports. Missing input validation in radsecproxy's `naptr-eduroam.sh` and `radsec-dynsrv.sh` scripts can lead to configuration injection via crafted radsec peer discovery …

    radsecproxy radsecproxy radsecproxy radsecproxy Debian Ubuntu
  • Unscored —
    CVE-2012-4566

    The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks …

    radsecproxy Debian
  • Unscored —
    CVE-2012-4523

    radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings tha…

    radsecproxy Debian