CVE-2015-9542: Buffer Overflow
A vulnerability was found in pamradius : the password length check was done incorrectly in the addpassword() function, resulting in a stack based buffer overflow.
This could be used to crash (DoS) an application using the PAM stack for authentication.
Other sources
addpassword in pamradiusauth.c in pamradius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pamradius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.
— Launchpad
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-9542?
CVE-2015-9542 has been classified as a moderate severity vulnerability due to the potential for denial of service (DoS) through a stack-based buffer overflow.
How do I fix CVE-2015-9542?
To fix CVE-2015-9542, update pam_radius to version 2.0.0 or later for Red Hat systems, or libpam-radius-auth to the appropriate patched version for Ubuntu or Debian systems.
Which versions are affected by CVE-2015-9542?
CVE-2015-9542 affects versions of pam_radius prior to 2.0.0 and libpam-radius-auth versions prior to their respective patched releases in Ubuntu and Debian.
What impact does CVE-2015-9542 have on applications?
CVE-2015-9542 can lead to crashes of applications using the PAM stack for authentication, resulting in a denial of service condition.
Is CVE-2015-9542 exploitable remotely?
Yes, CVE-2015-9542 can be exploited remotely if an attacker can authenticate against a system using the vulnerable PAM configuration.