pyrad vulnerabilities and fixes

Recent CVEs affecting pyrad, with upgrade or downgrade steps. 1 tracked.

pyrad has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-01-28. Highest priority: CVE-2013-0294 (score 47/100).

• CVE-2013-0294 MEDIUM 5.9 UPGRADE MITIGATE packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, w

FAQ

How do I fix pyrad vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is pyrad being exploited right now?

None of the tracked pyrad CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which pyrad CVE should I patch first?

CVE-2013-0294 currently ranks highest (47/100): packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, w.

← Back to latest CVEs