Radius Extension Project : Security Vulnerabilities
Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.
Max Base Score
7.5
Published
2013-07-31
Updated
2013-07-31
EPSS
4.98%
1 vulnerabilities found