CVE-2013-0342

🗓️ 09 Dec 2019 20:55:36Reported by redhatType

The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, making it easier for remote attackers to spoof packets

Reporter	Title	Published	Views	Family All 17
Circl	CVE-2013-0342	9 Mar 202409:11	–	circl
CNVD	pyrad packet spoofing vulnerability	10 Dec 201900:00	–	cnvd
Cvelist	CVE-2013-0342	9 Dec 201920:55	–	cvelist
Debian CVE	CVE-2013-0342	9 Dec 201920:55	–	debiancve
EUVD	EUVD-2019-0109	7 Oct 202500:30	–	euvd
Github Security Blog	pyrad uses sequential packet IDs	5 May 202200:29	–	github
NVD	CVE-2013-0342	9 Dec 201921:15	–	nvd
OSV	DEBIAN-CVE-2013-0342	9 Dec 201921:15	–	osv
OSV	GHSA-W4PX-9PGM-P2F3 pyrad uses sequential packet IDs	5 May 202200:29	–	osv
OSV	PYSEC-2019-154	9 Dec 201921:15	–	osv

NVD

Vulners

Node

pyrad_project pyradRange<2.1

[
  {
    "product": "pyrad",
    "vendor": "pyrad",
    "versions": [
      {
        "status": "affected",
        "version": "before 2.1"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2013/02/21/27
openwall	www.openwall.com/lists/oss-security/2013/02/15/9
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5
securityfocus	www.securityfocus.com/bid/57984
openwall	www.openwall.com/lists/oss-security/2013/02/22/2
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/82134

21 Nov 2024 01:47Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.14.3

CVSS 24.3

EPSS0.0129

CWE-20