Radsecproxy (Uninett) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2021-05-28. Vendor: Uninett.

CVEs of Radsecproxy

• CVE-2021-32642 - CVSS 9.4 (critical), 2021-05-28: radsecproxy is a generic RADIUS proxy that supports both UDP and TLS (RadSec) RADIUS transports. Missing input validation in radsecproxy's `naptr-eduroam.sh`…
• CVE-2012-4523 - CVSS 6.4 (medium), 2012-11-20: radsecproxy before 1.6.1 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to the block being used…
• CVE-2012-4566 - CVSS 6.4 (medium), 2012-11-20: The DTLS support in radsecproxy before 1.6.2 does not properly verify certificates when there are configuration blocks with CA settings that are unrelated to…