CVE-2013-4147: Yard Radius Project Yard Radius

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in a request in the (1) log_msg function in log.c or (2) version or (3) build_version function in version.c.

Affected products

• Yard Radius Project Yard Radius: version 1.1.2-4 only

Published 2013-08-09. Last modified 2026-06-16.