CVE-2013-2220

The CVE-2013-2220 entry describes a buffer overflow in the Radius extension for PHP (before version 1.2.7) affecting the radius_get_vendor_attr function when processing large Vendor Specific Attributes (VSA). The underlying issue is an assumption that VSA lengths are valid, which can be exploited...