CVE catalog

CVE-2013-0294

pyrad: CVE-2013-0294

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.86% · Oct 27, 2026

packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute force attack.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianpyradsid2.5.2-2fixed
Debianpyradforky2.5.2-2fixed
Debianpyradtrixie2.4-1fixed
Debianpyradbookworm2.1-3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianpyradsourcesid2.0-2lowNot reported[700669]
Debianpyradsourceforky2.0-2lowNot reported[700669]
Debianpyradsourcetrixie2.0-2lowNot reported[700669]
Debianpyradsourcebookworm2.0-2lowNot reported[700669]

[Debian bug #700669]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [python3-pyrad]Fixed

    Source package: [pyrad]

    Details (2)

    • 2.1-3 · all · bookworm

      Fixed · Fixed: 2.0-2

      dsa · pyrad · debian · bookworm; dsa · pyrad · debian · 12

    • 2.1-3 · all · bookworm

      Fixed · Fixed: 2.0-2

      dsa · pyrad · debian · bookworm; dsa · pyrad · debian · 12

[Debian 13 (Trixie)]

  • [python3-pyrad]Fixed

    Source package: [pyrad]

    Details (2)

    • 2.4-1 · all · trixie

      Fixed · Fixed: 2.0-2

      dsa · pyrad · debian · 13

    • 2.4-1 · all · trixie

      Fixed · Fixed: 2.0-2

      dsa · pyrad · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]