id: PYSEC-2019-154
details: The CreateID function in packet.py in pyrad before 2.1 uses sequential packet
  IDs, which makes it easier for remote attackers to spoof packets by predicting the
  next ID, a different vulnerability than CVE-2013-0294.
affected:
- package:
    name: pyrad
    ecosystem: PyPI
    purl: pkg:pypi/pyrad
  ranges:
  - type: GIT
    repo: https://github.com/pyradius/pyrad
    events:
    - introduced: "0"
    - fixed: 38f74b36814ca5b1a27d9898141126af4953bee5
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: "2.1"
  versions:
  - "1.0"
  - 1.0alpha1
  - "1.1"
  - "1.2"
  - "2.0"
references:
- type: WEB
  url: https://exchange.xforce.ibmcloud.com/vulnerabilities/82134
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2013/02/21/27
- type: WEB
  url: http://www.securityfocus.com/bid/57984
- type: FIX
  url: 
    https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2013/02/15/9
- type: REPORT
  url: https://bugzilla.redhat.com/show_bug.cgi?id=911685
- type: WEB
  url: http://www.openwall.com/lists/oss-security/2013/02/22/2
- type: ADVISORY
  url: https://github.com/advisories/GHSA-w4px-9pgm-p2f3
aliases:
- CVE-2013-0342
- GHSA-w4px-9pgm-p2f3
modified: "2021-07-05T00:01:25.106986Z"
published: "2019-12-09T21:15:00Z"