VYPR

Pam Radius

by FreeRADIUS

CVEs (1)

  • CVE-2015-9542HigFeb 24, 2020
    risk 0.42cvss 7.5epss 0.04

    add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and…