VYPR

rpm package

suse/pam_radius&distro=SUSE Manager Retail Branch Server 4.0

pkg:rpm/suse/pam_radius&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.0

Vulnerabilities (1)

  • CVE-2015-9542Feb 24, 2020
    affected < 1.4.0-3.3.1fixed 1.4.0-3.3.1

    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and cr