Skip to content
OpenAdvisories

Package · Ubuntu

libpam-radius-auth

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.0
    CVE-2024-3596 Public exploit EPSS 15%

    RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

    RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authen…

    IETF RFC krb5 freeradius Debian Ubuntu Alpine
  • Unscored —
    CVE-2015-9542

    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is…

    libpam-radius-auth libpam-radius-auth Debian Ubuntu