CVE catalog

CVE-2015-9542

libpam-radius-auth: CVE-2015-9542

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.47% · Oct 25, 2026

add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is vulnerable to a stack-based buffer overflow during memcpy(). An attacker could send a crafted password to an application (loading the pam_radius library) and crash it. Arbitrary code execution might be possible, depending on the application, C library, compiler, and other factors.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibpam-radius-authsid3.0.0-2fixed
Debianlibpam-radius-authforky3.0.0-2fixed
Debianlibpam-radius-authtrixie3.0.0-1fixed
Debianlibpam-radius-authbookworm2.0.0-1fixed
Ubuntulibpam-radius-auth16.041.3.17-0ubuntu4vulnerable
Ubuntulibpam-radius-auth16.041.3.17-0ubuntu4.1fixed
Ubuntulibpam-radius-auth18.041.3.17-0ubuntu5vulnerable
Ubuntulibpam-radius-auth18.041.3.17-0ubuntu5.18.04.1fixed
Ubuntulibpam-radius-authpro1.3.17-0ubuntu4vulnerable
Ubuntulibpam-radius-authpro1.3.17-0ubuntu4+esm1fixed
Susepam_radiuslinux enterprise module for server applications 15 sp21.4.0-3.3.1fixed
Susepam_radiuslinux enterprise module for server applications 15 sp31.4.0-3.3.1fixed
Susepam_radiuslinux enterprise high performance computing 15-espos1.4.0-3.3.1fixed
Susepam_radiuslinux enterprise high performance computing 15-ltss1.4.0-3.3.1fixed
Susepam_radiuslinux enterprise high performance computing 15 sp1-espos1.4.0-3.3.1fixed
Susepam_radiuslinux enterprise high performance computing 15 sp1-ltss1.4.0-3.3.1fixed
Susepam_radiuslinux enterprise server 15-ltss1.4.0-3.3.1fixed
Susepam_radiuslinux enterprise server 15 sp1-bcl1.4.0-3.3.1fixed
Susepam_radiuslinux enterprise server 15 sp1-ltss1.4.0-3.3.1fixed
Susepam_radiuslinux enterprise server for sap applications 151.4.0-3.3.1fixed
Susepam_radiuslinux enterprise server for sap applications 15 sp11.4.0-3.3.1fixed
Susepam_radiusmanager proxy 4.01.4.0-3.3.1fixed
Susepam_radiusmanager retail branch server 4.01.4.0-3.3.1fixed
Susepam_radiusmanager server 4.01.4.0-3.3.1fixed
Susepam_radiusenterprise storage 61.4.0-3.3.1fixed
Opensusepam_radiusleap 15.31.4.0-3.3.1fixed
Opensusepam_radiusleap 15.21.4.0-lp152.4.3.1fixed
Ubuntulibpam-radius-authpro1.3.17-0ubuntu4vulnerable
Ubuntulibpam-radius-authpro1.3.17-0ubuntu4+esm1fixed
Ubuntulibpam-radius-auth16.041.3.17-0ubuntu4vulnerable
Ubuntulibpam-radius-auth16.041.3.17-0ubuntu4.1fixed
Ubuntulibpam-radius-auth18.041.3.17-0ubuntu5vulnerable
Ubuntulibpam-radius-auth18.041.3.17-0ubuntu5.18.04.1fixed
Susepam_radiushpe helion openstack 81.3.16-239.4.1fixed
Susepam_radiusopenstack cloud 71.3.16-239.4.1fixed
Susepam_radiusopenstack cloud 81.3.16-239.4.1fixed
Susepam_radiusopenstack cloud crowbar 81.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server for sap applications 12 sp11.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server for sap applications 12 sp21.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server for sap applications 12 sp31.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server 12 sp1-ltss1.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server 12 sp2-ltss1.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server 12 sp2-bcl1.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server 12 sp3-ltss1.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server 12 sp3-bcl1.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server 12 sp41.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server for sap applications 12 sp41.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server 12 sp51.3.16-239.4.1fixed
Susepam_radiuslinux enterprise server for sap applications 12 sp51.3.16-239.4.1fixed
Susepam_radiusenterprise storage 51.3.16-239.4.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibpam-radius-authsourcesid1.4.0-3not yet assignedNot reported[951396]
Debianlibpam-radius-authsourceforky1.4.0-3not yet assignedNot reported[951396]
Debianlibpam-radius-authsourcetrixie1.4.0-3not yet assignedNot reported[951396]
Debianlibpam-radius-authsourcebookworm1.4.0-3not yet assignedNot reported[951396]
Ubuntulibpam-radius-authdeb16.041.3.17-0ubuntu4.1Not reportedUSN-4290-1Not reported
Ubuntulibpam-radius-authdeb18.041.3.17-0ubuntu5.18.04.1Not reportedUSN-4290-1Not reported
Ubuntulibpam-radius-authdebpro1.3.17-0ubuntu4+esm1Not reportedUSN-4290-2Not reported
Susepam_radiusrpmlinux enterprise module for server applications 15 sp21.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise module for server applications 15 sp31.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise high performance computing 15-espos1.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise high performance computing 15-ltss1.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise high performance computing 15 sp1-espos1.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise high performance computing 15 sp1-ltss1.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise server 15-ltss1.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise server 15 sp1-bcl1.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise server 15 sp1-ltss1.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise server for sap applications 151.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmlinux enterprise server for sap applications 15 sp11.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmmanager proxy 4.01.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmmanager retail branch server 4.01.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmmanager server 4.01.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Susepam_radiusrpmenterprise storage 61.4.0-3.3.1Not reportedSUSE-SU-2021:1896-1Not reported
Opensusepam_radiusrpmleap 15.31.4.0-3.3.1Not reportedOPENSUSE-SU-2021:1896-1Not reported
Opensusepam_radiusrpmleap 15.21.4.0-lp152.4.3.1Not reportedOPENSUSE-SU-2021:0870-1Not reported
Ubuntulibpam-radius-authdebpro1.3.17-0ubuntu4+esm1Not reportedUBUNTU-CVE-2015-9542Not reported
Ubuntulibpam-radius-authdeb16.041.3.17-0ubuntu4.1Not reportedUBUNTU-CVE-2015-9542Not reported
Ubuntulibpam-radius-authdeb18.041.3.17-0ubuntu5.18.04.1Not reportedUBUNTU-CVE-2015-9542Not reported
Susepam_radiusrpmhpe helion openstack 81.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmopenstack cloud 71.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmopenstack cloud 81.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmopenstack cloud crowbar 81.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server for sap applications 12 sp11.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server for sap applications 12 sp21.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server for sap applications 12 sp31.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server 12 sp1-ltss1.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server 12 sp2-ltss1.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server 12 sp2-bcl1.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server 12 sp3-ltss1.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server 12 sp3-bcl1.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server 12 sp41.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server for sap applications 12 sp41.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server 12 sp51.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmlinux enterprise server for sap applications 12 sp51.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported
Susepam_radiusrpmenterprise storage 51.3.16-239.4.1Not reportedSUSE-SU-2020:1117-1Not reported

[Debian bug #951396]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libpam-radius-auth]Fixed
    Details (2)

    • 2.0.0-1 · amd64 · bookworm

      Fixed · Fixed: 1.4.0-3

      dsa · libpam-radius-auth · debian · bookworm; dsa · libpam-radius-auth · debian · 12

    • 2.0.0-1 · arm64 · bookworm

      Fixed · Fixed: 1.4.0-3

      dsa · libpam-radius-auth · debian · bookworm; dsa · libpam-radius-auth · debian · 12

[Debian 13 (Trixie)]

  • [libpam-radius-auth]Fixed
    Details (2)

    • 3.0.0-1 · amd64 · trixie

      Fixed · Fixed: 1.4.0-3

      dsa · libpam-radius-auth · debian · 13

    • 3.0.0-1 · arm64 · trixie

      Fixed · Fixed: 1.4.0-3

      dsa · libpam-radius-auth · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]