https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:31:32.792674+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-96366 EUVD-2026-96366 2026-10-03T08:31:32.800087+00:00 EUVD-2026-96366 https://cve.radiocsirt.org/vuln/fkie_cve-2015-9542 fkie_cve-2015-9542 2026-10-03T08:31:32.800122+00:00

add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.

 https://cve.radiocsirt.org/vuln/ghsa-x66h-w4xq-44q4 GHSA-x66h-w4xq-44q4 2026-10-03T08:31:32.800154+00:00

add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.

 https://cve.radiocsirt.org/vuln/gsd-2015-9542 gsd-2015-9542 2026-10-03T08:31:32.800172+00:00 gsd-2015-9542 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0870-1 openSUSE-SU-2021:0870-1 — Security update for pam_radius 2026-10-03T08:31:32.800184+00:00

Security update for pam_radius

 https://cve.radiocsirt.org/vuln/suse-su-2020:1117-1 SUSE-SU-2020:1117-1 — Security update for pam_radius 2026-10-03T08:31:32.800201+00:00

Security update for pam_radius

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-9542 UBUNTU-CVE-2015-9542 2026-10-03T08:31:32.800216+00:00

Affected: Ubuntu:Pro:14.04:LTS: libpam-radius-auth, Ubuntu:16.04:LTS: libpam-radius-auth, Ubuntu:18.04:LTS: libpam-radius-auth

add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.