1088 matches found
Memory corruption
An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...
Design/Logic Flaw
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...
Buffer overflow
An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in radcoalesce" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...
Memory corruption
An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...
Denial of service
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
Spoofing
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions" and a denial of service...
CVE-2017-10982
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions" and a denial of service...
CVE-2017-10986
FreeRADIUS 3.x prior to 3.0.15 is affected by CVE-2017-10986. The issue is an out-of-bounds read in the dhcp_attr2vp() function when decoding string DHCP options, which could trigger a denial of service via crafted packets. Arch Linux advisory confirms the vulnerability and lists upgrading to 3.0...
CVE-2017-10978
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...
CVE-2017-10987
CVE-2017-10987 affects FreeRADIUS Server (FreeRADIUS 3.x prior to 3.0.15). The issue is a DHCP-related out-of-bounds read in fr_dhcp_decode_suboptions(), leading to a denial-of-service (server crash) when processing crafted DHCP packets. Connected advisories/ Nessus entries corroborate multiple D...
CVE-2017-10981
CVE-2017-10981 affects FreeRADIUS 2.x prior to 2.2.10 with a DHCP memory leak in fr_dhcp_decode() that can lead to a denial of service. The vulnerability is fixed by upgrading FreeRADIUS to 2.2.10+ (or applying vendor advisories). Public references in the connected documents confirm the issue and...
CVE-2017-10978
FreeRADIUS is affected by CVE-2017-10978 (and related CVEs) with out-of-bounds memory handling in packet processing. The primary publicly documented issue for CVE-2017-10978 is an out-of-bounds read/write in make_secret() that can cause a crash and, in some disclosures, potential code execution, ...
CVE-2017-10983
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...
CVE-2017-10980
An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...
PT-2017-11663
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions prior to 3.0.15 Description The issue allows for a denial of service due to a buffer over-read in the fr dhcp decode suboptions function. Recommendations For versions prior to 3.0.15, update to version 3.0.15 or later to...
UBUNTU-CVE-2017-10981
An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...
CVE-2017-10978: Improper Restriction of Operations within the Bounds of a Memory Buffer
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...
PT-2017-11659
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 2.x through 2.2.9 Description The issue allows for a denial of service due to a buffer over-read in the fr dhcp decode options function. Recommendations For FreeRADIUS versions 2.x through 2.2.9, update to version 2.2.10 or...
PT-2017-11658
Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 2.x before 2.2.10 Description The issue allows for a denial of service and is related to a memory leak in the fr dhcp decode function. Recommendations For FreeRADIUS versions 2.x before 2.2.10, update to version 2.2.10 or...