https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T21:29:30.023457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2017-avi-231 certfr-2017-avi-231 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Oracle VM Server pour x86 et Oracle Linux</span… 2026-10-03T21:29:30.134988+00:00 certfr-2017-avi-231 https://cve.radiocsirt.org/vuln/cnvd-2017-11647 cnvd-2017-11647 2026-10-03T21:29:30.135034+00:00 cnvd-2017-11647 https://cve.radiocsirt.org/vuln/euvd-2026-75669 EUVD-2026-75669 2026-10-03T21:29:30.135051+00:00 EUVD-2026-75669 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9148 fkie_cve-2017-9148 2026-10-03T21:29:30.135063+00:00

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

 https://cve.radiocsirt.org/vuln/ghsa-qvp7-wcjq-6rv5 GHSA-qvp7-wcjq-6rv5 2026-10-03T21:29:30.135092+00:00

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

 https://cve.radiocsirt.org/vuln/gsd-2017-9148 gsd-2017-9148 2026-10-03T21:29:30.135109+00:00 gsd-2017-9148 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10767-1 openSUSE-SU-2024:10767-1 — freeradius-server-3.0.23-1.5 on GA media 2026-10-03T21:29:30.135120+00:00

freeradius-server-3.0.23-1.5 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2017:1705-1 SUSE-SU-2017:1705-1 — Security update for freeradius-server 2026-10-03T21:29:30.135145+00:00

Security update for freeradius-server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9148 Withdrawn: UBUNTU-CVE-2017-9148 2026-10-03T21:29:30.135160+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: freeradius, Ubuntu:16.04:LTS: freeradius

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.