{"action":"Upgrade pyrad to 2.1 or later.","affected":[{"fixed":"2.1","introduced":"0"}],"component":"pyrad","cve_ids":["CVE-2013-0342"],"ecosystem":"PyPI","epss":0.01543,"exploited":false,"fixed_versions":["2.1"],"ghsa_id":"GHSA-w4px-9pgm-p2f3","id":"tcs_01M5KG8MV61A2ZA9YH2S25Z0JG","modified_at":"2026-06-10T17:01:47.065354800Z","published_at":"2019-12-09T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-154","https://exchange.xforce.ibmcloud.com/vulnerabilities/82134","http://www.openwall.com/lists/oss-security/2013/02/21/27","http://www.securityfocus.com/bid/57984","https://github.com/pyradius/pyrad/commit/38f74b36814ca5b1a27d9898141126af4953bee5","http://www.openwall.com/lists/oss-security/2013/02/15/9","https://bugzilla.redhat.com/show_bug.cgi?id=911685","http://www.openwall.com/lists/oss-security/2013/02/22/2","https://github.com/advisories/GHSA-w4px-9pgm-p2f3"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2019-154","url":"https://osv.dev/vulnerability/PYSEC-2019-154"},{"source":"nvd","source_id":"CVE-2013-0342","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-0342"}],"summary":"The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than"}