CVE-2001-1377
No CVSS score yet. EPSS 5.4% chance of exploitation in the next 30 days.
Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers to cause a denial of service (crash) via a Vendor-Length that is less than 2.
- EPSS
- 5.4% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- freeradius:freeradius
- gnu:radius
- icradius:icradius
- livingston:radius
- lucent:radius
- miquel_van_smoorenburg_cistron:radius
- openradius:openradius
- radiusclient:radiusclient
- xtradius:xtradius
- yard_radius:yard_radius
- yard_radius_project:yard_radius