Known vulnerabilities in FreeRADIUS

Software: FreeRADIUS
Software CPE: cpe:2.3:a:freeradius_server_project:freeradius:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 28
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FreeRADIUS FreeRADIUS is affected by 28 known vulnerabilities: 4 high, 13 medium, 11 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70506 - Improper input validation
CVE-2022-41861
CWE-20 Low
No
No
3.0.26 27.12.2022 SB2022122727
SB2022122728
SB2022122729
and 13 more
#VU70505 - NULL Pointer Dereference
CVE-2022-41860
CWE-476 Medium
No
No
3.0.26 27.12.2022 SB2022122727
SB2022122728
SB2022122729
and 14 more
#VU70504 - Exposure of sensitive information to an unauthorized actor
CVE-2022-41859
CWE-200 Low
No
No
3.0.26 27.12.2022 SB2022122727
SB2022122728
SB2022122729
and 14 more
#VU50016 - UNIX Hard Link
CWE-62 Low
No
No
3.0.20 26.01.2021 SB2019120323
SB2021012619
#VU27346 - Resource Management Errors
CVE-2019-17185
CWE-399 Medium
No
No
3.0.20 27.04.2020 SB2019120323
SB2020042713
SB2020093027
and 3 more
#VU27344 - Exposure of sensitive information to an unauthorized actor
CVE-2019-13456
CWE-200 Medium
No
No
3.0.20 27.04.2020 SB2019120323
SB2020042713
SB2020042858
and 4 more
#VU18336 - Improper Authentication
CVE-2019-11235
CWE-287 Medium
No
No
3.0.19 25.04.2019 SB2019042501
SB2019042502
SB2019050904
and 7 more
#VU18335 - Improper Authentication
CVE-2019-11234
CWE-287 Medium
No
No
3.0.19 25.04.2019 SB2019042501
SB2019042502
SB2019050904
and 6 more
#VU10012 - Improper input validation
CVE-2017-10988
CWE-20 Medium
No
No
- 16.01.2018 SB2017082803
SB2017081721
#VU7561 - Out-of-bounds read
CVE-2017-10987
CWE-125 Low
No
No
- 18.07.2017 SB2017071801
SB2017072708
SB2017081113
and 4 more
#VU7560 - Out-of-bounds read
CVE-2017-10986
CWE-125 Low
No
No
- 18.07.2017 SB2017071801
SB2017072708
SB2017081113
and 4 more
#VU7559 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-10985
CWE-835 Medium
No
No
- 18.07.2017 SB2017071801
SB2017072708
SB2017081113
and 4 more
#VU7558 - Out-of-bounds write
CVE-2017-10984
CWE-787 High
No
No
- 18.07.2017 SB2017071801
SB2017072708
SB2017081113
and 4 more
#VU7557 - Out-of-bounds read
CVE-2017-10983
CWE-125 Low
No
No
- 18.07.2017 SB2017071801
SB2017071802
SB2017072708
and 6 more
#VU7556 - Out-of-bounds read
CVE-2017-10982
CWE-125 Low
No
No
- 18.07.2017 SB2017071801
SB2017071802
SB2017072708
and 2 more
#VU7555 - Missing release of memory after effective lifetime
CVE-2017-10981
CWE-401 Low
No
No
- 18.07.2017 SB2017071801
SB2017071802
SB2017072708
and 2 more
#VU7552 - Memory corruption
CVE-2017-10978
CWE-119 Medium
No
No
- 17.07.2017 SB2017071801
SB2017071802
SB2017072708
and 6 more
#VU7553 - Memory corruption
CVE-2017-10979
CWE-119 High
No
No
- 17.07.2017 SB2017071801
SB2017071802
SB2017072708
and 2 more
#VU7554 - Missing release of memory after effective lifetime
CVE-2017-10980
CWE-401 Low
No
No
- 17.07.2017 SB2017071801
SB2017071802
SB2017072708
and 2 more
#VU6798 - Authentication Bypass Issues
CVE-2017-9148
CWE-592 Low
No
No
- 30.05.2017 SB2017053001
SB2017060221
SB2017062814
and 4 more


Showing elements 1 - 20 out of 28