Vulnerability in Gnu Radius

CVE-2004-0849

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

EPSS: 0.016 (72.9th percentile) — read the EPSS interpretation.

Affected products

Gnu Radius — versions 0.92.1, 0.93, 0.94
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_MLIST, Patch)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)