libpam-radius-auth vulnerability

2020-02-2400:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.004

Percentile

73.7%

JSON

Releases

Ubuntu 19.10
Ubuntu 18.04 ESM
Ubuntu 16.04 ESM

Packages

libpam-radius-auth - The PAM RADIUS authentication module

Details

It was discovered that libpam-radius-auth incorrectly handled certain long
passwords. A remote attacker could possibly use this issue to cause
libpam-radius-auth to crash, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu19.10noarchlibpam-radius-auth< 1.3.17-0ubuntu5.19.10.1UNKNOWN
Ubuntu19.10noarchlibpam-radius-auth-dbgsym< 1.3.17-0ubuntu5.19.10.1UNKNOWN
Ubuntu18.04noarchlibpam-radius-auth< 1.3.17-0ubuntu5.18.04.1UNKNOWN
Ubuntu18.04noarchlibpam-radius-auth-dbgsym< 1.3.17-0ubuntu5.18.04.1UNKNOWN
Ubuntu16.04noarchlibpam-radius-auth< 1.3.17-0ubuntu4.1UNKNOWN
Ubuntu16.04noarchlibpam-radius-auth-dbgsym< 1.3.17-0ubuntu4.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	19.10	noarch	libpam-radius-auth	< 1.3.17-0ubuntu5.19.10.1	UNKNOWN
Ubuntu	19.10	noarch	libpam-radius-auth-dbgsym	< 1.3.17-0ubuntu5.19.10.1	UNKNOWN
Ubuntu	18.04	noarch	libpam-radius-auth	< 1.3.17-0ubuntu5.18.04.1	UNKNOWN
Ubuntu	18.04	noarch	libpam-radius-auth-dbgsym	< 1.3.17-0ubuntu5.18.04.1	UNKNOWN
Ubuntu	16.04	noarch	libpam-radius-auth	< 1.3.17-0ubuntu4.1	UNKNOWN
Ubuntu	16.04	noarch	libpam-radius-auth-dbgsym	< 1.3.17-0ubuntu4.1	UNKNOWN