CVE-2004-0938: Freeradius

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.

Affected products

• Freeradius Freeradius: up to and including 1.0.1

Published 2004-11-03. Last modified 2026-06-16.