Skip to content
OpenAdvisories

Package · Debian

radsecproxy

3 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.0

    Missing input validation in dynamic discovery example scripts.

    radsecproxy is a generic RADIUS proxy that supports both UDP and TLS (RadSec) RADIUS transports. Missing input validation in radsecproxy's `naptr-eduroam.sh` and `radsec-dynsrv.sh` scripts can lead to configuration injection via crafted radsec peer discovery …