Approved changes feed: RSS · Atom

cpe:2.3:a:freeradius:freeradius:1.1.3:*:*:*:*:*:*:*

part: a version: 1.1.3 update: *

VendorFreeradius (22bab347-a285-53b1-b123-a5a9b5151514)
ProductFreeradius (d934f0fb-8cf2-5c1a-96b2-4f43bdadb881)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/freeradius purl2cpe 2026-06-01 10:16:34.669464
pkg:deb/ubuntu/freeradius purl2cpe 2026-06-01 10:16:34.669466
pkg:github/freeradius/freeradius-server purl2cpe 2026-06-01 10:16:34.669467
pkg:gitlab/redhat/freeradius purl2cpe 2026-06-01 10:16:34.669468
pkg:rpm/fedora/freeradius purl2cpe 2026-06-01 10:16:34.669470

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-4966 vulnerable 2026-06-08 04:59:34.089081 Details available
modules/rlm_unix/rlm_unix.c in FreeRADIUS before 2.2.0, when unix mode is enabled for user authentication, does not properly check the password expiration in /etc/shadow, which allows remote authenticated users to authenticate using an expired password.
Published: 2013-03-12T22:00:00.000Z
Updated: 2024-08-07T00:23:39.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3111 vulnerable 2026-06-08 04:51:32.393304 Details available
The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to CVE-2003-0967.
Published: 2009-09-09T18:00:00.000Z
Updated: 2024-08-07T06:14:56.206Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.