Memory corruption

An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...

CVE-2017-10982

CVE-2017-10982 is a FreeRADIUS 2.x vulnerability (FR-GV-205) where DHCP decoding over-reads in fr_dhcp_decode_options(), enabling denial of service. Affected: FreeRADIUS 2.x prior to 2.2.10. Impact: DoS due to buffer over-read; no other impacts stated. Mitigation: upgrade to 2.2.10+ or apply vend...

CVE-2017-10980

An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decodetlv" and a denial of service...

CVE-2017-10986

FreeRADIUS 3.x prior to 3.0.15 is affected by CVE-2017-10986. The issue is an out-of-bounds read in the dhcp_attr2vp() function when decoding string DHCP options, which could trigger a denial of service via crafted packets. Arch Linux advisory confirms the vulnerability and lists upgrading to 3.0...

CVE-2017-10981

An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode" and a denial of service...

CVE-2017-10983

An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service...

CVE-2017-10984

An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vpwimax" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...

CVE-2017-10986

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...

CVE-2017-10987

An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in frdhcpdecodesuboptions" and a denial of service...

CVE-2017-10979

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in radcoalesce" - this allows remote attackers to cause a denial of service daemon crash or possibly execute arbitrary code...

CVE-2017-10978

FreeRADIUS is affected by CVE-2017-10978 (and related CVEs) with out-of-bounds memory handling in packet processing. The primary publicly documented issue for CVE-2017-10978 is an out-of-bounds read/write in make_secret() that can cause a crash and, in some disclosures, potential code execution, ...

CVE-2017-10982

An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions" and a denial of service...

CVE-2017-10978

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in makesecret" and a denial of service...

CVE-2017-10984

CVE-2017-10984 affects FreeRADIUS 3.x (pre-3.0.15). Root cause: write overflow in data2vp_wimax() could be triggered by remote input, enabling a remote attacker to crash the daemon or potentially execute arbitrary code. Public advisories bundled with OpenSUSE/CentOS/EulerOS/SUSE updates show this...

CVE-2017-10983

CVE-2017-10983 is an out-of-bounds read fault in FreeRADIUS related to DHCP packet decoding (option 63) that can crash the server. The Connected documents show concrete remediation: Debian fixed related issues in DSA-3930-1 with patched 2.2.5+dfsg-0.2+deb8u1 for jessie and 3.0.12+dfsg-5+deb9u1 fo...

CVE-2017-10985

An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service...

CVE-2017-10985

CVE-2017-10985 concerns FreeRADIUS 3.x (pre-3.0.15) where FR-GV-302 causes an infinite loop and memory exhaustion when processing 'concat' attributes, leading to denial of service. Connected advisories confirm that upgrades to 3.0.15 were released (e.g., openSUSE/SUSE updates) and list CVE-2017-1...

CVE-2017-10981

CVE-2017-10981 affects FreeRADIUS 2.x prior to 2.2.10 with a DHCP memory leak in fr_dhcp_decode() that can lead to a denial of service. The vulnerability is fixed by upgrading FreeRADIUS to 2.2.10+ (or applying vendor advisories). Public references in the connected documents confirm the issue and...

CVE-2017-10980

FreeRADIUS 2.x prior to version 2.2.10 is affected by CVE-2017-10980: a DHCP memory leak in decode_tlv that can lead to denial of service. The connected Nessus/Debian/RHEL/MiracleLinux advisories enumerate this issue among other FreeRADIUS memory/overflow concerns, but the provided documents do n...

CVE-2017-10979

CVE-2017-10979 affects FreeRADIUS 2.x before 2.2.10, with a write overflow in rad_coalesce() that can cause a daemon crash or remote code execution. Multiple connected advisories confirm the issue and reference affected releases (2.x prior to 2.2.10; 3.x before 3.0.15 in related FR-GV-20x issues)...