CVE-2004-0849: GNU Radius

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

Affected products

• GNU Radius: version 0.92.1 only; version 0.93 only; version 0.94 only; version 0.95 only; version 0.96 only; version 1.1 only; …

Published 2004-12-23. Last modified 2026-06-16.