CVE-2004-0849
published 2004-12-23CVE-2004-0849: Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the…
PriorityP416medium5CVSS 2.0
AVNACLAuNCNINAP
EPSS
1.57%
72.6th percentile
Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | radius | — | — |
| gnu | radius | — | — |
| gnu | radius | — | — |
| gnu | radius | — | — |
| gnu | radius | — | — |
| gnu | radius | — | — |
| gnu | radius | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://lists.gnu.org/archive/html/info-gnu-radius/2004-09/msg00000.htmlhttp://www.idefense.com/application/poi/display?id=141&type=vulnerabilitieshttps://exchange.xforce.ibmcloud.com/vulnerabilities/17391http://lists.gnu.org/archive/html/info-gnu-radius/2004-09/msg00000.htmlhttp://www.idefense.com/application/poi/display?id=141&type=vulnerabilitieshttps://exchange.xforce.ibmcloud.com/vulnerabilities/17391
2004-12-23
Published