| Package | Affected versions | Patched versions |
|---|---|---|
| freeradius | < 3.0.0 | 3.0.0 |
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free