CVE-2004-0849

3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.7%
top 27.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Radius
Timeline
PublishedDec 23
Latest updateApr 29

Description

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDgnu/radius7 versions+6

Patches

Patch: lists.gnu.org ↗Patch: www.idefense.com ↗Patch: lists.gnu.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-grgc-7f74-qq6p: Integer overflow in the asn_decode_string() function defined in asn1↗2022-04-29
▶
CVEList
CVE-2004-0849: Integer overflow in the asn_decode_string() function defined in asn1↗2004-09-17
▶
CVE-2004-0849 (MEDIUM CVSS 5) | Integer overflow in the asn_decode_ | cvebase.io