PatchTheCVEpam radius vulnerabilities and fixes
Recent CVEs affecting pam radius, with upgrade or downgrade steps. 1 tracked.
Also searched as: pamradius.
pam radius has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-02-24. Highest priority: CVE-2015-9542 (score 59/100).
- CVE-2015-9542 HIGH 7.5 DOWNGRADE MITIGATE add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input passwor
FAQ
How do I fix pam radius vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pam radius being exploited right now?
None of the tracked pam radius CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pam radius CVE should I patch first?
CVE-2015-9542 currently ranks highest (59/100): add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input passwor.