[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fy6fqDbgm35aoxfpNAt4sLPa7ILBEyJq0nwfQ4J_diR0":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":87,"topProductsByCves":88,"seoMetadata":91,"meta":100},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":25},11326,"freeradius",2,49,0,103,"2024-07-09","f",[16,20],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},46881,101,48,{"id":21,"product_name":22,"version_count":9,"cve_count":23,"kev_count":11,"last_cve_update":24},46882,"pam_radius",1,"2020-02-24","Freeradius is a technology vendor with 2 tracked products and 49 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[27,36,40,46,54,61,66,72,76,81],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":35},"CVE-2017-10979","An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows \"Write overflow in rad_coalesce()\" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.","2017-07-17",9.8,"v3.0","Critical",false,0.22202,{"cveId":37,"description":38,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":39},"CVE-2017-10984","An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows \"Write overflow in data2vp_wimax()\" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.",0.18318,{"cveId":41,"description":42,"publishedDate":13,"cvssScore":43,"cvssVersion":44,"severity":33,"isKev":34,"epssScore":45},"CVE-2024-3596","RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.",9,"v3.1",0.14859,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":34,"epssScore":53},"CVE-2009-3111","The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11.  NOTE: this is a regression error related to CVE-2003-0967.","2009-09-09",5,"v2","Medium",0.11176,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":51,"severity":59,"isKev":34,"epssScore":60},"CVE-2001-1376","Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via shared secret data.","2002-03-04",7.5,"High",0.08544,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":34,"epssScore":65},"CVE-2019-11234","FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9497.","2019-04-22",0.07624,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":51,"severity":52,"isKev":34,"epssScore":71},"CVE-2012-3547","Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long \"not after\" timestamp in a client certificate.","2012-09-18",6.8,0.0565,{"cveId":73,"description":74,"publishedDate":57,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":34,"epssScore":75},"CVE-2001-1377","Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.",0.05425,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":34,"epssScore":80},"CVE-2003-0967","rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.","2003-12-15",0.04638,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":51,"severity":52,"isKev":34,"epssScore":86},"CVE-2005-4744","Off-by-one error in the sql_error function in sql_unixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing the external database query to fail.  NOTE: this single issue is part of a larger-scale disclosure, originally by SUSE, which reported multiple issues that were disputed by FreeRADIUS.  Disputed issues included file descriptor leaks, memory disclosure, LDAP injection, and other issues.  Without additional information, the most recent FreeRADIUS report is being regarded as the authoritative source for this CVE identifier.","2005-12-31",6.4,0.04381,[],[89,90],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":9,"cve_count":23,"kev_count":11,"last_cve_update":24},{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Freeradius - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Freeradius covering 2 products with 49 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Freeradius vulnerabilities, Freeradius security, Freeradius CVE, Freeradius threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":96,"@type":97,"name":98,"description":93,"url":99},"https:\u002F\u002Fschema.org","Organization","Freeradius","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Ffreeradius",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":101,"apiVersion":102},"2026-10-28T16:07:44.655Z","3.0"]