CVE-2015-9542
libpam-radius-auth: add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and...
CVE-2015-9542 is fixed in libpam-radius-auth on 1 platform by libpam-radius-auth 1.3.17-0ubuntu5.18.04.1 (version 1.3.17-0ubuntu5.18.04.1), released December 30, 2015. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0347
89th percentile
add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libpam-radius-auth · Ubuntu 18.04.6 LTS (bionic) | 1.3.17-0ubuntu5.18.04.1 | libpam-radius-auth 1.3.17-0ubuntu5.18.04.1 | Dec 30, 2015 |