MS16-021: Security update for NPS RADIUS server to address denial of service: February 9, 2016

None None...

Microsoft Network Policy Server RADIUS Implementation CVE-2016-0050 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial of service vulnerability. Successful exploits may allow the attacker to cause a denial of service condition. Technologies Affected Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft...

Cumulative update for Windows 10: February 9, 2016

None None...

Cumulative update for Windows 10 Version 1511: February 9, 2016

None None...

KLA10751 Multiple vulnerabilities in Microsoft Windows

Multiple serious vulnerabilities have been found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions or gain privileges. Below is a complete list of vulnerabilities 1. An unknown vulnerability at...

FreeRadius EAP-PWD module buffer overflow vulnerability (CNVD-2016-00367)

FreeRadius is a suite of software that implements the RADIUS protocol from the FreeRADIUS Server project. The EAP-PWD module of FreeRadius uses the 'strcpy' function to encapsulate C strings into EAP-PWD packets, allowing remote attackers to exploit vulnerabilities by submitting special requests ...

UBUNTU-CVE-2015-9542

addpassword in pamradiusauth.c in pamradius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy. An attacker could send a crafted password to an application loading the pamradius library and crash it. Arbitrary code...

Scientific Linux Security Update : krb5 on SL7.x x86_64 (20151119)

It was found that the krb5readmessage function of MIT Kerberos did not correctly sanitize input, and could create invalid krb5data objects. A remote, unauthenticated attacker could use this flaw to crash a Kerberos child process via a specially crafted request. CVE-2014-5355 A flaw was found in t...

[SECURITY] Fedora 22 Update: xsupplicant-2.2.0-13.fc22

This software allows a GNU/Linux or BSD workstation to authenticate with a RADIUS server using 802.1x and various EAP protocols. The intended use is for computers with wireless LAN connections to complete a strong authentication before joining the network...

[SECURITY] Fedora 23 Update: xsupplicant-2.2.0-13.fc23

This software allows a GNU/Linux or BSD workstation to authenticate with a RADIUS server using 802.1x and various EAP protocols. The intended use is for computers with wireless LAN connections to complete a strong authentication before joining the network...

openSUSE Security Update : ppp (openSUSE-2015-827)

The ppp package was updated to fix one security issue. - CVE-2015-3310: Fixed buffer overflow in radius plug-ins rcmksid bnc927841. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

UBUNTU-CVE-2015-5314

The eappwdprocess function in eapserver/eapserverpwd.c in hostapd 2.x before 2.6 does not validate that the reassembly buffer is large enough for the final fragment when used with 1 an internal EAP server or 2 a RADIUS server and EAP-pwd is enabled in a runtime configuration, which allows remote...

CVE-2006-4181

Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown vectors...

The vulnerability of the Cisco IOS operating system, which allows a intruder to trigger a service failure

The vulnerability of the Cisco IOS operating system’s RADIUS client implementation is related to resource management errors. Exploiting this vulnerability allows a malicious actor to trigger service interruptions by sending specially crafted messages via the RADIUS protocol...

CVE-2015-6263

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

Design/Logic Flaw

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

CVE-2015-6263

CVE-2015-6263 concerns Cisco IOS Software’s RADIUS client. The issue affects Cisco IOS 15.4(3)M2.2 where, when a shared RADIUS secret is configured, a remote RADIUS server can trigger a denial-of-service via malformed responses. The root cause is described as improper parsing of RADIUS packets by...

CVE-2015-6263

The RADIUS client implementation in Cisco IOS 15.43M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause a denial of service device reload via malformed answers, aka Bug ID CSCuu59324...

Cisco IOS Software RADIUS Client Denial of Service Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A security vulnerability in the RADIUS client feature of Cisco IOS Software can be exploited by a remote attacker to cause a reload on an affected device...

Cisco IOS Software RADIUS Client Denial of Service Vulnerability

A vulnerability in the RADIUS client feature of Cisco IOS Software could allow an authenticated, remote attacker to cause a reload of the affected device. The vulnerability is due to improper parsing of malformed RADIUS packets returned by a RADIUS server. An attacker could exploit this...