Логотип exploitDog
bind:"CVE-2022-41860" OR bind:"CVE-2022-41859" OR bind:"CVE-2022-41861"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2022-41860" OR bind:"CVE-2022-41859" OR bind:"CVE-2022-41861"

Количество 23

Количество 23

suse-cvrf логотип

SUSE-SU-2023:0135-1

больше 2 лет назад

Security update for freeradius-server

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2023:0124-1

больше 2 лет назад

Security update for freeradius-server

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4626-1

больше 2 лет назад

Security update for freeradius-server

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4622-1

больше 2 лет назад

Security update for freeradius-server

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4621-1

больше 2 лет назад

Security update for freeradius-server

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:4620-1

больше 2 лет назад

Security update for freeradius-server

EPSS: Низкий
oracle-oval логотип

ELSA-2023-2870

больше 2 лет назад

ELSA-2023-2870: freeradius:3.0 security update (MODERATE)

EPSS: Низкий
oracle-oval логотип

ELSA-2023-2166

больше 2 лет назад

ELSA-2023-2166: freeradius security and bug fix update (MODERATE)

EPSS: Низкий
ubuntu логотип

CVE-2022-41860

больше 2 лет назад

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2022-41860

больше 3 лет назад

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2022-41860

больше 2 лет назад

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2022-41860

больше 2 лет назад

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-cfm7-f9p7-7m2w

больше 2 лет назад

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2022-41861

больше 2 лет назад

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS3: 6.5
EPSS: Низкий
redhat логотип

CVE-2022-41861

больше 3 лет назад

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2022-41861

больше 2 лет назад

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS3: 6.5
EPSS: Низкий
debian логотип

CVE-2022-41861

больше 2 лет назад

A flaw was found in freeradius. A malicious RADIUS client or home serv ...

CVSS3: 6.5
EPSS: Низкий
ubuntu логотип

CVE-2022-41859

больше 2 лет назад

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2022-41859

больше 3 лет назад

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2022-41859

больше 2 лет назад

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
suse-cvrf логотип
SUSE-SU-2023:0135-1

Security update for freeradius-server

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2023:0124-1

Security update for freeradius-server

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4626-1

Security update for freeradius-server

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4622-1

Security update for freeradius-server

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4621-1

Security update for freeradius-server

больше 2 лет назад
suse-cvrf логотип
SUSE-SU-2022:4620-1

Security update for freeradius-server

больше 2 лет назад
oracle-oval логотип
ELSA-2023-2870

ELSA-2023-2870: freeradius:3.0 security update (MODERATE)

больше 2 лет назад
oracle-oval логотип
ELSA-2023-2166

ELSA-2023-2166: freeradius security and bug fix update (MODERATE)

больше 2 лет назад
ubuntu логотип
CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2022-41860

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, ...

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
github логотип
GHSA-cfm7-f9p7-7m2w

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2022-41861

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2022-41861

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS3: 7.5
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-41861

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2022-41861

A flaw was found in freeradius. A malicious RADIUS client or home serv ...

CVSS3: 6.5
0%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2022-41859

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2022-41859

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS3: 7.5
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2022-41859

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS3: 7.5
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу