CVE-2004-0131: The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attacke...

Security readout for executives and security teams

CVE-2004-0131 is a remote denial-of-service flaw in GNU Radius daemon before version 1.2. A malformed UDP accounting request can crash the daemon, potentially interrupting RADIUS authentication or accounting services. The provided sources do not show active exploitation or a CVSS score. Exposure is most likely in legacy environments still running GNU Radius radiusd before 1.2, especially where the daemon accepts UDP RADIUS traffic from untrusted or broadly reachable networks. Prioritize remediation if GNU Radius supports critical network access, VPN, ISP, or accounting workflows. The business risk is outage of authentication or accounting services, not confirmed compromise. Legacy exposure should be resolved during normal vulnerability maintenance unless the service is internet-facing or mission-critical. Mitigation focus: Identify any GNU Radius radiusd deployments and record exact versions.; Upgrade GNU Radius radiusd versions before 1.2 to 1.2 or later.; Review CERT and GNU guidance for any environment-specific remediation notes..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.