Radius
Vendor:
First CVE: Mar 4, 2002 · Active for 24 years
6
Total CVEs
More Total CVEs than 80% of tracked products
2.0
Avg CVEs / Year
Higher CVE frequency than 60% of tracked products
6.3
Avg CVSS
Higher Avg CVSS than 25% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Radius over time
Volume of CVEsAvg CVSS Base Score
First CVE
Mar 4, 2002
24 years ago
Most Recent CVE
Nov 28, 2006
7,181 days ago
CVE Severity & Scoring
Radius6 CVEs
67%
33%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown6 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown6 (100.0%)
User Interaction
None0 (0.0%)
Unknown6 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown6 (100.0%)
Top CVEs
Signals from CVEs in this product scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-4181HIGH Format string vulnerability in the sqllog function in the SQL accounting code for radiusd in GNU Radius 1.2 and 1.3 allows remote attackers to execute arbitrary code via unknown ve | Nov 28, 2006 | 10.0 | 26 | NO | NO |
CVE-2001-1376HIGH Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and possibly execute arbitrary code via share | Mar 4, 2002 | 7.5 | 22 | NO | NO |
CVE-2001-1377MEDIUM Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via | Mar 4, 2002 | 5.0 | 21 | NO | NO |
CVE-2004-0131MEDIUM The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Sta | Mar 3, 2004 | 5.0 | 16 | NO | NO |
CVE-2004-0849MEDIUM Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remo | Dec 23, 2004 | 5.0 | 15 | NO | NO |
CVE-2004-0576MEDIUM The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP m | Dec 6, 2004 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (6 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (6 CVEs).
Media Mentions
Signals from CVEs in this product scope (6 CVEs).
Top CNAs Publishing CVEs For Radius
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.3 | 1 | 10.0 | 5.0% | 0 | 0 |
| 1.2 | 2 | 7.5 | 3.3% | 0 | 0 |
| 1.1 | 3 | 5.0 | 2.2% | 0 | 0 |
| 0.96 | 1 | 5.0 | 1.6% | 0 | 0 |
| 0.95 | 3 | 5.8 | 5.2% | 0 | 0 |
| 0.94 | 3 | 5.8 | 5.2% | 0 | 0 |
| 0.93 | 3 | 5.8 | 5.2% | 0 | 0 |
| 0.92.1 | 3 | 5.8 | 5.2% | 0 | 0 |