VYPR

rpm package

suse/pam_radius&distro=SUSE Linux Enterprise Server 12 SP3-BCL

pkg:rpm/suse/pam_radius&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCL

Vulnerabilities (1)

  • CVE-2015-9542Feb 24, 2020
    affected < 1.3.16-239.4.1fixed 1.3.16-239.4.1

    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and cr