Known vulnerabilities in FreeRADIUS - page 2
Vendor:
FreeRADIUS Server Project
Software:
FreeRADIUS
Software CPE:
cpe:2.3:a:freeradius_server_project:freeradius:*:*:*:*:*:*:*:*
Total vulnerabilities:
28
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.2.10
3.0.28
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.0.27
3.2.4
3.2.3
3.2.2
3.2.1
3.0.26
3.2.0
3.0.25
3.0.24
3.0.23
3.0.22
0.3.0
3.0.21
3.0.20
2.0
3.0.0.beta0
3.0.0.beta1
4.0.0
3.1.x
3.0.19
3.0.18
3.0.17
3.0.16
3.0.0.1
3.0.0.0
2.0.02
2.0.01
2
1.1.00
1.0.03
1.0.02
1.0.01
1
0.9.03
0.9.02
0.7.0
0.6.0
0.5.0
0.4.0
0.2.0
0.1.0
3.0.15
2.2.10
2.2.9
2.2.8
2.2.7
2.2.6
2.2.5
2.2.4
3.0.14
3.0.13
3.0.12
3.0.11
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.2
2.2.3
2.2.2
2.2.1
3.0.1
3.0.0
2.0.1
2.0.5
2.0.3
2.0.2
2.2.0
0.6
0.7
2.0.0
0.1
1.1.1
1.1.8
1.1.2
1.1.4
2.1.10
2.1.12
0.9.0
0.7.1
2.1.11
2.1.0
2.1.8
2.1.7
2.1.6
2.1.4
2.1.3
2.1.2
2.1.1
2.1.9
1.1.6
1.1.7
2.0.4
1.1.5
1.1.3
1.1.0
1.0.5
1.0.3
1.0.4
1.0.2
0.9
1.0.0
0.9.3
0.8
0.8.1
0.5
0.9.1
0.4
1.0.1
0.9.2
0.2
0.3
Vulnerabilities (28)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU32360 - Improper Certificate Validation CVE-2015-4680 |
CWE-295 | Medium | 2.2.8 | 05.04.2017 |
SB2017040508 SB2017011017 SB2015070711 |
||
| #VU39361 - NULL Pointer Dereference CVE-2015-8762 |
CWE-476 | Medium | - | 27.03.2017 |
SB2017032707 |
||
| #VU39362 - Out-of-bounds read CVE-2015-8763 |
CWE-125 | High | - | 27.03.2017 |
SB2017032707 |
||
| #VU39363 - Memory corruption CVE-2015-8764 |
CWE-119 | High | - | 27.03.2017 |
SB2017032707 |
||
| #VU32556 - Stack-based buffer overflow CVE-2014-2015 |
CWE-121 | Medium | 2.2.4, 3.0.2 | 02.11.2014 |
SB2014110204 SB2014030401 SB2015081707 and 1 more |
||
| #VU43009 - Credentials Management CVE-2011-4966 |
CWE-255 | Low | - | 13.03.2013 |
SB2013031304 |
||
| #VU32753 - Stack-based buffer overflow CVE-2012-3547 |
CWE-121 | Medium | 2.2.0 | 18.09.2012 |
SB2012091801 SB2012100124 SB2012100804 |
||
| #VU33323 - Improper Authentication CVE-2011-2701 |
CWE-287 | Medium | 2.1.12 | 04.08.2011 |
SB2011080401 SB2012050309 |
Showing elements 21 - 40 out of 28