{"action":"Upgrade radsecproxy to 1.8.2-4 or later.","affected":[{"fixed":"1.8.2-4","introduced":"0"}],"component":"radsecproxy","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1.8.2-4"],"id":"tcs_01M5NFPME2GPZ59QCYTN6YYXJM","modified_at":"2026-10-23T18:03:37.611623256Z","published_at":"2021-05-28T17:15:07.537Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2021-32642","https://security-tracker.debian.org/tracker/CVE-2021-32642"],"severity":{"label":"critical","score":9.4},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2021-32642#Debian:14/radsecproxy","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2021-32642"}],"summary":"radsecproxy is a generic RADIUS proxy that supports both UDP and TLS (RadSec) RADIUS transports. Missing input validation in radsecproxy's `naptr-eduroam.sh` and `radsec-dynsrv.sh` scripts can lead to"}