FreeRadius EAP-PWD module buffer overflow vulnerability

FreeRadius is a suite of software that implements the RADIUS protocol from the FreeRADIUS Server project. The EAP-PWD module of FreeRadius fails to validate the length of the commit message load, allowing remote attackers to exploit the vulnerability to submit special requests for denial-of-servi...

FreeRadius EAP-PWD Module Denial of Service Vulnerability

FreeRadius is a suite of software that implements the RADIUS protocol from the FreeRADIUS Server project. The EAP-PWD module of FreeRadius does not check packet lengths, allowing remote attackers to exploit vulnerabilities to submit special requests for denial-of-service attacks...

RHEL 7 : JBoss EAP (RHSA-2015:2540)

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.5 and fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Critical security impact. Common...

SUSE-SU-2015:2183-1 Security update for strongswan

The strongswan package was updated to fix the following security issue: - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin bsc953817...

SUSE-SU-2015:2183-2 Security update for strongswan

The strongswan package was updated to fix the following security issue: - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin bsc953817...

[SECURITY] Fedora 22 Update: xsupplicant-2.2.0-13.fc22

This software allows a GNU/Linux or BSD workstation to authenticate with a RADIUS server using 802.1x and various EAP protocols. The intended use is for computers with wireless LAN connections to complete a strong authentication before joining the network...

[SECURITY] Fedora 23 Update: xsupplicant-2.2.0-13.fc23

This software allows a GNU/Linux or BSD workstation to authenticate with a RADIUS server using 802.1x and various EAP protocols. The intended use is for computers with wireless LAN connections to complete a strong authentication before joining the network...

Design/Logic Flaw

Red Hat JBoss Enterprise Application Platform EAP before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service via unspecified vectors...

CVE-2015-5304

Red Hat JBoss Enterprise Application Platform EAP before 6.4.5 does not properly authorize access to shut down the server, which allows remote authenticated users with the Monitor, Deployer, or Auditor role to cause a denial of service via unspecified vectors...

CVE-2015-5304

The CVE-2015-5304 vulnerability affects Red Hat JBoss Enterprise Application Platform (EAP) 6.4.x prior to 6.4.5. Root cause: improper authorization allows remote authenticated users with the Monitor, Deployer, or Auditor roles to shut down the server, causing a denial of service via unspecified ...

The vulnerability of the OpenSUSE operating system, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hosted Hostapd software allow a intruder to trigger a service failure.

The vulnerability of the EAP-pwd server of the operating system openSUSE, the Wi-Fi Protected Access Point software WPA Supplicant, and the Jouni Malinen-hostapd software access point is caused by a buffer overflow. Exploiting this vulnerability allows an attacker, operating remotely, to cause a...

RHEL 5 / 6 : JBoss EAP (RHSA-2015:2535)

Updated packages for the Apache commons-collections library for Red Hat JBoss Enterprise Application Platform 5.2, which fix one security issue, are now available for Red Hat Enterprise Linux 4, 5, and 6. Red Hat Product Security has rated this update as having Critical security impact. A Common...

RHEL 6 : Red Hat JBoss Enterprise Application Platform 6.4.5 update (Critical) (RHSA-2015:2539)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2015:2539 advisory. - JBoss EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server CVE-2015-5304 -...

SUSE SLED11 / SLES11 Security Update : strongswan (SUSE-SU-2015:2186-1)

The strongswan package was updated to fix the following security issue : - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin bsc953817. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

RHEL 6 : JBoss EAP (RHSA-2015:2542)

Updated jboss-ec2-eap packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat JBoss Enterprise Application Platform 6.4.4 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. Commo...

RHEL 5 : JBoss EAP (RHSA-2015:2538)

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.5 and fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 5. Red Hat Product Security has rated this update as having Critical security impact. Common...

SUSE SLED12 / SLES12 Security Update : strongswan (SUSE-SU-2015:2183-1)

The strongswan package was updated to fix the following security issue : - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin bsc953817. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory...

SUSE-SU-2015:2186-1 Security update for strongswan

The strongswan package was updated to fix the following security issue: - CVE-2015-8023: Fixed an authentication bypass vulnerability in the eap-mschapv2 plugin bsc953817...

Critical: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.5 jboss-ec2-eap update

Updated jboss-ec2-eap packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat JBoss Enterprise Application Platform 6.4.4 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Critical security impact. Commo...

EAP: missing authorization check for Monitor/Deployer/Auditor role when shutting down server

It was found that JBoss EAP did not properly authorize a user performing a shut down. A remote user with the Monitor, Deployer, or Auditor role could use this flaw to shut down the EAP server, which is an action restricted to admin users...