CVE-2015-8764

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

CVE-2015-8763

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted 1 commit or 2 confirm message, which triggers an out-of-bounds read...

CVE-2015-8764

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

CVE-2015-8762

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a zero-length EAP-PWD packet...

CVE-2015-8762

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a zero-length EAP-PWD packet...

CVE-2015-8763

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted 1 commit or 2 confirm message, which triggers an out-of-bounds read...

CVE-2015-8764

CVE-2015-8764 affects the FreeRADIUS EAP-PWD module. An off-by-one error in FreeRADIUS 3.0 through 3.0.8 triggers a buffer overflow. The connected documents consistently describe this as the vulnerability class and version range; no exploitation or mitigation details are provided in the supplied ...

CVE-2015-8764

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

CVE-2015-8763

The CVE-2015-8763 entry concerns the FreeRADIUS EAP-PWD module (versions 3.0 through 3.0.8). Affected component: EAP-PWD handling. Root cause: out-of-bounds read triggered by crafted (commit or confirm) EAP-PWD messages. Impact: described as unspecified in the sources; no explicit CVSS or real-wo...

CVE-2015-8763

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted 1 commit or 2 confirm message, which triggers an out-of-bounds read...

CVE-2015-8762

The CVE-2015-8762 entry concerns the EAP-PWD module in FreeRADIUS versions 3.0 through 3.0.8. The vulnerability allows remote attackers to cause a denial of service via a zero-length EAP-PWD packet, triggering a NULL pointer dereference that can crash the server. Connected sources consistently re...

CVE-2015-8763: Out-of-bounds Read

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted 1 commit or 2 confirm message, which triggers an out-of-bounds read...

CVE-2015-8764: Improper Restriction of Operations within the Bounds of a Memory Buffer

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow...

pfsense 2.3.2 XSS Vulnerability

Overview pfsense is an open source firewall. The web interface is written in PHP. In version 2.3.2-RELEASE amd64, it is vulnerable to reflected XSS. XSS can lead to disclosure of cookies, session tokens etc. Details XSS 1 CVSS: Medium; 6.1...

CVE-2015-8762: NULL Pointer Dereference

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service NULL pointer dereference and server crash via a zero-length EAP-PWD packet...

FreeRADIUS -- TLS resumption authentication bypass

Stefan Winter reports: The TLS session cache in FreeRADIUS before 3.0.14 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers such as malicious 802.1X supplicants to bypass authentication via PEAP or TTLS...

SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2017:0102-1)

This update of freeradius-server fixes several issues. Security issue fixed : - CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates bsc935573 Non security issues fixed : - Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems by relaxing a too...

SUSE-SU-2017:0102-1 Security update for freeradius-server

This update of freeradius-server fixes several issues. Security issue fixed: - CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates bsc935573 Non security issues fixed: - Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems by relaxing a too...

FreeRadius EAP-PWD module buffer overflow vulnerability

FreeRadius is a suite of software that implements the RADIUS protocol from the FreeRADIUS Server project. The EAP-PWD module of FreeRadius fails to validate the length of the commit message load, allowing remote attackers to exploit the vulnerability to submit special requests for denial-of-servi...

FreeRadius EAP-PWD Module Denial of Service Vulnerability

FreeRadius is a suite of software that implements the RADIUS protocol from the FreeRADIUS Server project. The EAP-PWD module of FreeRadius does not check packet lengths, allowing remote attackers to exploit vulnerabilities to submit special requests for denial-of-service attacks...