Approved changes feed: RSS · Atom

cpe:2.3:a:pyrad_project:pyrad:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPyrad Project (0e5c9a31-cb38-5c3f-ab0a-a9a21c554720)
ProductPyrad (c694cc96-9c53-52ce-b975-752c413923f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pyrad purl2cpe 2026-06-01 10:13:00.418072
pkg:deb/ubuntu/pyrad purl2cpe 2026-06-01 10:13:00.418074
pkg:github/pyradius/pyrad purl2cpe 2026-06-01 10:13:00.418077
pkg:pypi/pyrad purl2cpe 2026-06-01 10:13:00.418080
pkg:rpm/fedora/python-pyrad purl2cpe 2026-06-01 10:13:00.418082
pkg:rpm/opensuse/python-pyrad purl2cpe 2026-06-01 10:13:00.418085

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0342 vulnerable 2026-06-08 05:03:47.253784 Details available
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than CVE-2013-0294.
Published: 2019-12-09T20:55:36.000Z
Updated: 2024-08-06T14:25:09.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0294 vulnerable 2026-06-08 05:03:46.887933 Details available
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.
Published: 2020-01-28T15:53:24.000Z
Updated: 2024-08-06T14:18:09.615Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.