Lucene search
Veracode Vulnerability DatabaseVERACODE:30742HistoryMay 29, 2021 - 3:42 p.m.
Unauthorized Access
2021-05-2915:42:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
radsecproxy
unauthorized access
input validation
configuration injection
dns records
EPSS
0.004
Percentile
72.9%
radsecproxy allows unauthorized access. Missing input validation in naptr-eduroam.sh and radsec-dynsrv.sh scripts can lead to configuration injection via malicious radsec peer discovery DNS records.
References
github.com/radsecproxy/radsecproxy/security/advisories/GHSA-56gw-9rj9-55rc
lists.fedoraproject.org/archives/list/[email protected]/message/HOC5AFG65NYLMMUTNSBOPC5F4LBAC7BR/
lists.fedoraproject.org/archives/list/[email protected]/message/W7QK5M2SZVMCAFSRQMM6PRZZRQQ372XI/
security-tracker.debian.org/tracker/CVE-2021-32642
www.usenix.org/conference/usenixsecurity21/presentation/jeitner
Related
redhatcve
redhatcve
CVE-2021-32642
2022-05-20 22:37:07
openvas
openvas
Fedora: Security Advisory for radsecproxy (FEDORA-2021-a4be4c93e4)
2021-06-17 00:00:00
Fedora: Security Advisory for radsecproxy (FEDORA-2021-d3f8193065)
2021-06-17 00:00:00
nvd
nvd
CVE-2021-32642
2021-05-28 17:15:07
osv
osv
CVE-2021-32642
2021-05-28 17:15:07
prion
prion
Input validation
2021-05-28 17:15:00
cve
cve
CVE-2021-32642
2021-05-28 17:15:07
cvelist
cvelist
fedora
fedora
[SECURITY] Fedora 33 Update: radsecproxy-1.9.0-1.fc33
2021-06-09 02:45:15
[SECURITY] Fedora 34 Update: radsecproxy-1.9.0-1.fc34
2021-06-09 03:07:43
ubuntucve
ubuntucve
CVE-2021-32642
2021-05-28 00:00:00
debiancve
debiancve
CVE-2021-32642
2021-05-28 17:15:07