Lucene search

[email protected]CVE-2017-10982

HistoryJul 17, 2017 - 5:29 p.m.

CVE-2017-10982

2017-07-1717:29:00

CWE-125

[email protected]

web.nvd.nist.gov

cve-2017-10982

freeradius

dhcp

buffer over-read

denial of service

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

8.2 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

JSON

An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows “DHCP - Buffer over-read in fr_dhcp_decode_options()” and a denial of service.

Affected configurations

NVD

Node

freeradiusfreeradiusMatch2.0.0

freeradiusfreeradiusMatch2.0.0pre1

freeradiusfreeradiusMatch2.0.0pre2

freeradiusfreeradiusMatch2.0.1

freeradiusfreeradiusMatch2.0.2

freeradiusfreeradiusMatch2.0.3

freeradiusfreeradiusMatch2.0.4

freeradiusfreeradiusMatch2.0.5

freeradiusfreeradiusMatch2.1.0

freeradiusfreeradiusMatch2.1.1

freeradiusfreeradiusMatch2.1.2

freeradiusfreeradiusMatch2.1.3

freeradiusfreeradiusMatch2.1.4

freeradiusfreeradiusMatch2.1.6

freeradiusfreeradiusMatch2.1.7

freeradiusfreeradiusMatch2.1.8

freeradiusfreeradiusMatch2.1.9

freeradiusfreeradiusMatch2.1.10

freeradiusfreeradiusMatch2.1.11

freeradiusfreeradiusMatch2.1.12

freeradiusfreeradiusMatch2.2.0

freeradiusfreeradiusMatch2.2.1

freeradiusfreeradiusMatch2.2.2

freeradiusfreeradiusMatch2.2.3

freeradiusfreeradiusMatch2.2.4

freeradiusfreeradiusMatch2.2.5

freeradiusfreeradiusMatch2.2.6

freeradiusfreeradiusMatch2.2.7

freeradiusfreeradiusMatch2.2.8

freeradiusfreeradiusMatch2.2.9

CPENameOperatorVersion
freeradius:freeradiusfreeradiuseq2.0.0
freeradius:freeradiusfreeradiuseq2.0.1
freeradius:freeradiusfreeradiuseq2.0.2
freeradius:freeradiusfreeradiuseq2.0.3
freeradius:freeradiusfreeradiuseq2.0.4
freeradius:freeradiusfreeradiuseq2.0.5
freeradius:freeradiusfreeradiuseq2.1.0
freeradius:freeradiusfreeradiuseq2.1.1
freeradius:freeradiusfreeradiuseq2.1.2
freeradius:freeradiusfreeradiuseq2.1.3

CPE	Name	Operator	Version
freeradius:freeradius	freeradius	eq	2.0.0
freeradius:freeradius	freeradius	eq	2.0.1
freeradius:freeradius	freeradius	eq	2.0.2
freeradius:freeradius	freeradius	eq	2.0.3
freeradius:freeradius	freeradius	eq	2.0.4
freeradius:freeradius	freeradius	eq	2.0.5
freeradius:freeradius	freeradius	eq	2.1.0
freeradius:freeradius	freeradius	eq	2.1.1
freeradius:freeradius	freeradius	eq	2.1.2
freeradius:freeradius	freeradius	eq	2.1.3