Approved changes feed: RSS · Atom

cpe:2.3:a:freeradius:freeradius:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorFreeradius (22bab347-a285-53b1-b123-a5a9b5151514)
ProductFreeradius (d934f0fb-8cf2-5c1a-96b2-4f43bdadb881)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/freeradius purl2cpe 2026-06-01 10:16:34.669505
pkg:deb/ubuntu/freeradius purl2cpe 2026-06-01 10:16:34.669506
pkg:github/freeradius/freeradius-server purl2cpe 2026-06-01 10:16:34.669507
pkg:gitlab/redhat/freeradius purl2cpe 2026-06-01 10:16:34.669509
pkg:rpm/fedora/freeradius purl2cpe 2026-06-01 10:16:34.669510

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-2015 vulnerable 2026-06-08 05:05:27.203148 Details available
Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.
Published: 2014-11-02T00:00:00.000Z
Updated: 2024-08-06T09:58:16.213Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-4966 vulnerable 2026-06-08 04:59:34.092923 Details available
modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
Published: 2013-03-12T22:00:00.000Z
Updated: 2024-08-07T00:23:39.372Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.