Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2007-2028HistoryApr 13, 2007 - 6:19 p.m.
CVE-2007-2028
2007-04-1318:19:00
Debian Security Bug Tracker
security-tracker.debian.org
10
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.5%
Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUE_PAIR data structures.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | freeradius | < 1.1.6-1 | freeradius_1.1.6-1_all.deb |
| Debian | 11 | all | freeradius | < 1.1.6-1 | freeradius_1.1.6-1_all.deb |
| Debian | 999 | all | freeradius | < 1.1.6-1 | freeradius_1.1.6-1_all.deb |
| Debian | 13 | all | freeradius | < 1.1.6-1 | freeradius_1.1.6-1_all.deb |
Related
openvas
openvas
Gentoo Security Advisory GLSA 200704-14 (FreeRADIUS)
2008-09-24 00:00:00
SLES9: Security update for freeradius
2009-10-10 00:00:00
Mandriva Update for freeradius MDKSA-2007:085 (freeradius)
2009-04-09 00:00:00
nessus
nessus
SuSE 10 Security Update : freeradius (ZYPP Patch Number 3287)
2007-12-13 00:00:00
Fedora Core 6 : freeradius-1.1.3-2.fc6 (2007-499)
2007-05-16 00:00:00
GLSA-200704-14 : FreeRADIUS: Denial of Service
2007-04-19 00:00:00
cve
cve
CVE-2007-2028
2007-04-13 18:19:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:55
redhat
redhat
(RHSA-2007:0338) Moderate: freeradius security update
2007-05-10 00:00:00
cvelist
cvelist
CVE-2007-2028
2007-04-13 18:00:00
ubuntucve
ubuntucve
CVE-2007-2028
2007-04-13 00:00:00
securityvulns
securityvulns
FreeRADIUS memory leak
2007-04-16 00:00:00
oraclelinux
oraclelinux
Moderate: freeradius security update
2007-05-10 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: freeradius-1.1.3-2.fc6
2007-05-14 17:06:05
nvd
nvd
CVE-2007-2028
2007-04-13 18:19:00
prion
prion
Design/Logic Flaw
2007-04-13 18:19:00
centos
centos
freeradius security update
2007-05-10 16:23:13
gentoo
gentoo
FreeRADIUS: Denial of service
2007-04-17 00:00:00
freebsd
freebsd
freeradius -- EAP-TTLS Tunnel Memory Leak Remote DOS Vulnerability
2007-04-10 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.5%
Related for DEBIANCVE:CVE-2007-2028