MS16-021: Security update for NPS RADIUS server to address denial of service: February 9, 2016

None None...

Microsoft Network Policy Server RADIUS Implementation CVE-2016-0050 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause a denial of service condition. Technologies Affected Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft...

FreeRadius EAP-PWD module buffer overflow vulnerability (CNVD-2016-00367)

FreeRadius is a suite of software that implements the RADIUS protocol from the FreeRADIUS Server project. The EAP-PWD module of FreeRadius uses the 'strcpy' function to encapsulate C strings into EAP-PWD packets, allowing remote attackers to exploit vulnerabilities by submitting special requests ...

PT-2015-7849

Name of the Vulnerable Software and Affected Versions pam radius version 1.4.0 Description The issue arises from the add password function in pam radius auth.c, which fails to correctly check the length of the input password. This oversight makes it vulnerable to a stack-based buffer overflow...

UBUNTU-CVE-2015-9542

addpassword in pamradiusauth.c in pamradius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy. An attacker could send a crafted password to an application loading the pamradius library and crash it. Arbitrary code...

Scientific Linux Security Update : krb5 on SL7.x x86_64 (20151119)

It was found that the krb5readmessage function of MIT Kerberos did not correctly sanitize input, and could create invalid krb5data objects. A remote, unauthenticated attacker could use this flaw to crash a Kerberos child process via a specially crafted request. CVE-2014-5355 A flaw was found in t...

[SECURITY] Fedora 22 Update: xsupplicant-2.2.0-13.fc22

This software allows a GNU/Linux or BSD workstation to authenticate with a RADIUS server using 802.1x and various EAP protocols. The intended use is for computers with wireless LAN connections to complete a strong authentication before joining the network...

[SECURITY] Fedora 23 Update: xsupplicant-2.2.0-13.fc23

This software allows a GNU/Linux or BSD workstation to authenticate with a RADIUS server using 802.1x and various EAP protocols. The intended use is for computers with wireless LAN connections to complete a strong authentication before joining the network...

openSUSE Security Update : ppp (openSUSE-2015-827)

The ppp package was updated to fix one security issue. - CVE-2015-3310: Fixed buffer overflow in radius plug-ins rcmksid bnc927841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

UBUNTU-CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

CVE-2006-4181

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors...

Cisco IOS DoS

The vulnerability of the Cisco IOS operating system’s RADIUS client implementation is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger service interruptions by sending specially crafted messages via the RADIUS protocol...

CVE-2015-6263

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

Design/Logic Flaw

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

CVE-2015-6263

CVE-2015-6263 concerns Cisco IOS Software’s RADIUS client. The issue affects Cisco IOS 15.4(3)M2.2 where, when a shared RADIUS secret is configured, a remote RADIUS server can trigger a denial-of-service via malformed responses. The root cause is described as improper parsing of RADIUS packets by...

CVE-2015-6263

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

CVE-2015-6263: Undefined Security Weakness

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

Cisco IOS Software RADIUS Client Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the RADIUS client feature of Cisco IOS Software can be exploited by a remote attacker to cause a reload on an affected device...

Cisco IOS Software RADIUS Client Denial of Service Vulnerability

A vulnerability in the RADIUS client feature of Cisco IOS Software could allow an authenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to improper parsing of malformed RADIUS packets returned by a RADIUS server. An attacker could exploit this...

PT-2015-2347

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.43M2.2 and earlier Description The issue is related to the RADIUS client implementation in Cisco IOS, which is affected by resource management errors. This can be exploited by a remote attacker using specially crafted...