Описание
The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.
Ссылки
- Third Party AdvisoryUS Government Resource
- PatchVendor Advisory
- Third Party AdvisoryUS Government Resource
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:gnu:radius:1.1:*:*:*:*:*:*:*
EPSS
Процентиль: 88%
0.03542
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 4 лет назад
The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.
EPSS
Процентиль: 88%
0.03542
Низкий
5 Medium
CVSS2
Дефекты
NVD-CWE-Other