GNU Radius vulnerabilities

6 CVEs affecting GNU Radius, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-4181, published 2006-11-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2001-1376, published 2002-03-04. High severity, CVSS 7.5. EPSS: 8.5% chance of exploitation in the next 30 days. Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.
CVE-2001-1377, published 2002-03-04. Medium severity, CVSS 5.0. EPSS: 5.4% chance of exploitation in the next 30 days. Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length…
CVE-2006-4181, published 2006-11-28. High severity, CVSS 10.0. EPSS: 5% chance of exploitation in the next 30 days. Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors.
CVE-2004-0131, published 2004-03-03. Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days. The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute…
CVE-2004-0849, published 2004-12-23. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to…
CVE-2004-0576, published 2004-12-06. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing…