3 matches found
EulerOS 2.0 SP3 : ppp (EulerOS-SA-2021-1834)
According to the version of the ppp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, o...
CVE-2018-11574: Improper Input Validation
Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure, or authentication bypass. This implementation is distributed as a patch for PPPD 0.91, and includes the affected eap.c and eap-tls.c files...
PT-2011-4033
Name of the Vulnerable Software and Affected Versions FreeRADIUS version 2.1.11 Description The issue concerns the ocsp check function in rlm eap tls.c, which does not properly parse replies from OCSP responders when OCSP is enabled. This allows remote attackers to bypass authentication by using...