48 matches found
FreeRADIUS 'dhcp_attr2vp()' Function Denial of Service Vulnerability
FreeRADIUS is a set of software that implements the RADIUS protocol from the FreeRADIUS Server project. The software is mainly used for account authentication management, bookkeeping management and Internet account management, etc. and contains a Radius server, a client library for BSD protocol...
CVE-2017-10986
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
Denial of service
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
DEBIAN-CVE-2017-10986
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
CVE-2017-10986
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcpattr2vp" and a denial of service...
CVE-2017-10986
FreeRADIUS 3.x prior to 3.0.15 is affected by CVE-2017-10986. The issue is an out-of-bounds read in the dhcp_attr2vp() function when decoding string DHCP options, which could trigger a denial of service via crafted packets. Arch Linux advisory confirms the vulnerability and lists upgrading to 3.0...
