VYPR

rpm package

suse/pam_radius&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS

pkg:rpm/suse/pam_radius&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS

Vulnerabilities (1)

  • CVE-2015-9542Feb 24, 2020
    affected < 1.4.0-3.3.1fixed 1.4.0-3.3.1

    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and cr