« Volver al listado

CVE-2013-2220

Estado: ModificadaAlta (7.5)—

Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Radius Extension Project — Radius

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-2220",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-07-31T13:20:27.423",
  "references": [
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714362",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://pecl.php.net/package/radius/1.2.7",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2726",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://github.com/LawnGnome/php-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=714362",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://pecl.php.net/package/radius/1.2.7",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2013/dsa-2726",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/LawnGnome/php-radius/commit/13c149b051f82b709e8d7cc32111e84b49d57234",
      "tags": [
        "Exploit",
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in the radius_get_vendor_attr function in the Radius extension before 1.2.7 for PHP allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large Vendor Specific Attributes (VSA) length value."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en la función radius_get_vendor_attr en la extensión Radius anterior a 1.2.7 para PHP, permite a atacantes remotos provocar una denegación de servicio (caída) y posiblemente la ejecución de código arbitraria a través de un valor alto en Vendor Specific Attributes (VSA)."
    }
  ],
  "lastModified": "2026-06-16T23:52:58.010",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:radius_extension_project:radius:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24180799-F1E3-4CED-8E56-8D61A853E613",
              "versionEndIncluding": "1.2.6"
            },
            {
              "criteria": "cpe:2.3:a:radius_extension_project:radius:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8510CB61-6237-4771-AA4C-1432670100B2"
            },
            {
              "criteria": "cpe:2.3:a:radius_extension_project:radius:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58E5F87B-D749-4444-A50B-EF757F7D46D9"
            },
            {
              "criteria": "cpe:2.3:a:radius_extension_project:radius:1.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7EF9F81D-6338-4535-A652-CD43A3DE4462"
            },
            {
              "criteria": "cpe:2.3:a:radius_extension_project:radius:1.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D6050AA4-E64C-4885-9192-2C7C556A729D"
            },
            {
              "criteria": "cpe:2.3:a:radius_extension_project:radius:1.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "40531DA1-C74E-464F-A16E-ED903445E527"
            },
            {
              "criteria": "cpe:2.3:a:radius_extension_project:radius:1.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76D949BF-4709-4810-84DD-FB583284637B"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "58A8B39D-57DF-4D71-BBCA-1D5A19E0A1B9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}