CVE-2026-78633

The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests...

CVE-2026-78633: Loop with Unreachable Exit Condition

The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests...

PT-2026-113387

The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A sub-attribute length of zero causes the parser to loop indefinitely, resulting in worker-thread exhaustion and denial of new RADIUS authentication requests...

Okta RADIUS Agent resource management error vulnerability

The Okta RADIUS Agent versions from 2.17.5 to 2.28.0 have a resource management error vulnerability. This vulnerability arises from the lack of verification of the length of sub-attributes when parsing the Vendor-Specific attribute. Sub-attributes with a length of zero can cause the parser to ent...

CVE-2001-1377: Undefined Security Weakness

Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service crash via a Vendor-Length that is less than 2...