https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:29:32 +0000 https://cve.radiocsirt.org/vuln/certfr-2017-avi-231 certfr-2017-avi-231 https://cve.radiocsirt.org/vuln/certfr-2017-avi-231 https://cve.radiocsirt.org/vuln/cnvd-2017-11647 cnvd-2017-11647 https://cve.radiocsirt.org/vuln/cnvd-2017-11647 https://cve.radiocsirt.org/vuln/euvd-2026-75669 EUVD-2026-75669 https://cve.radiocsirt.org/vuln/euvd-2026-75669 https://cve.radiocsirt.org/vuln/fkie_cve-2017-9148 <p>The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.</p> <p>The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-9148 https://cve.radiocsirt.org/vuln/ghsa-qvp7-wcjq-6rv5 <p>The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.</p> <p>The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.</p> https://cve.radiocsirt.org/vuln/ghsa-qvp7-wcjq-6rv5 https://cve.radiocsirt.org/vuln/gsd-2017-9148 gsd-2017-9148 https://cve.radiocsirt.org/vuln/gsd-2017-9148 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10767-1 <p>freeradius-server-3.0.23-1.5 on GA media</p> <p>freeradius-server-3.0.23-1.5 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10767-1 https://cve.radiocsirt.org/vuln/suse-su-2017:1705-1 <p>Security update for freeradius-server</p> <p>Security update for freeradius-server</p> https://cve.radiocsirt.org/vuln/suse-su-2017:1705-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9148 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freeradius, Ubuntu:16.04:LTS: freeradius</p> <p>The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: freeradius, Ubuntu:16.04:LTS: freeradius</p> <p>The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-9148