Vulnerability Details CVE-2001-1377
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.103
EPSS Ranking 92.7%
CVSS Severity
CVSS v2 Score 5.0
Products affected by CVE-2001-1377
-
cpe:2.3:a:freeradius:freeradius:0.2
-
cpe:2.3:a:freeradius:freeradius:0.3
-
cpe:2.3:a:gnu:radius:0.92.1
-
cpe:2.3:a:gnu:radius:0.93
-
cpe:2.3:a:gnu:radius:0.94
-
cpe:2.3:a:gnu:radius:0.95
-
cpe:2.3:a:icradius:icradius:0.14
-
cpe:2.3:a:icradius:icradius:0.15
-
cpe:2.3:a:icradius:icradius:0.16
-
cpe:2.3:a:icradius:icradius:0.17
-
cpe:2.3:a:icradius:icradius:0.17b
-
cpe:2.3:a:icradius:icradius:0.18
-
cpe:2.3:a:icradius:icradius:0.18.1
-
cpe:2.3:a:livingston:radius:2.0
-
cpe:2.3:a:livingston:radius:2.0.1
-
cpe:2.3:a:livingston:radius:2.1
-
cpe:2.3:a:lucent:radius:2.0
-
cpe:2.3:a:lucent:radius:2.0.1
-
cpe:2.3:a:lucent:radius:2.1
-
cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.1
-
cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.2
-
cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.3
-
cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.4
-
cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6.5
-
cpe:2.3:a:miquel_van_smoorenburg_cistron:radius:1.6_.0
-
cpe:2.3:a:openradius:openradius:0.8
-
cpe:2.3:a:openradius:openradius:0.9
-
cpe:2.3:a:openradius:openradius:0.9.1
-
cpe:2.3:a:openradius:openradius:0.9.2
-
cpe:2.3:a:openradius:openradius:0.9.3
-
cpe:2.3:a:radiusclient:radiusclient:0.3.1
-
cpe:2.3:a:xtradius:xtradius:1.1_pre1
-
cpe:2.3:a:xtradius:xtradius:1.1_pre2
-
cpe:2.3:a:yard_radius:yard_radius:1.0.17
-
cpe:2.3:a:yard_radius:yard_radius:1.0.18
-
cpe:2.3:a:yard_radius:yard_radius:1.0.19
-
cpe:2.3:a:yard_radius:yard_radius:1.0_pre13
-
cpe:2.3:a:yard_radius:yard_radius:1.0_pre14
-
cpe:2.3:a:yard_radius:yard_radius:1.0_pre15
-
cpe:2.3:a:yard_radius_project:yard_radius:1.0.16