Lucene search
Ubuntu.comUB:CVE-2007-2028HistoryApr 13, 2007 - 12:00 a.m.
CVE-2007-2028
2007-04-1300:00:00
ubuntu.com
ubuntu.com
11
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.5%
Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to
cause a denial of service (memory consumption) via a large number of
EAP-TTLS tunnel connections using malformed Diameter format attributes,
which causes the authentication request to be rejected but does not reclaim
VALUE_PAIR data structures.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 6.06 | noarch | freeradius | < 1.1.0-1ubuntu2.1 | UNKNOWN |
| ubuntu | 6.10 | noarch | freeradius | < 1.1.3-1ubuntu0.1 | UNKNOWN |
| ubuntu | 7.04 | noarch | freeradius | < 1.1.3-3ubuntu1.1 | UNKNOWN |
Related
openvas
openvas
Gentoo Security Advisory GLSA 200704-14 (FreeRADIUS)
2008-09-24 00:00:00
SLES9: Security update for freeradius
2009-10-10 00:00:00
Mandriva Update for freeradius MDKSA-2007:085 (freeradius)
2009-04-09 00:00:00
nessus
nessus
SuSE 10 Security Update : freeradius (ZYPP Patch Number 3287)
2007-12-13 00:00:00
Fedora Core 6 : freeradius-1.1.3-2.fc6 (2007-499)
2007-05-16 00:00:00
GLSA-200704-14 : FreeRADIUS: Denial of Service
2007-04-19 00:00:00
cve
cve
CVE-2007-2028
2007-04-13 18:19:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:55
redhat
redhat
(RHSA-2007:0338) Moderate: freeradius security update
2007-05-10 00:00:00
cvelist
cvelist
CVE-2007-2028
2007-04-13 18:00:00
securityvulns
securityvulns
FreeRADIUS memory leak
2007-04-16 00:00:00
oraclelinux
oraclelinux
Moderate: freeradius security update
2007-05-10 00:00:00
debiancve
debiancve
CVE-2007-2028
2007-04-13 18:19:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: freeradius-1.1.3-2.fc6
2007-05-14 17:06:05
nvd
nvd
CVE-2007-2028
2007-04-13 18:19:00
prion
prion
Design/Logic Flaw
2007-04-13 18:19:00
centos
centos
freeradius security update
2007-05-10 16:23:13
gentoo
gentoo
FreeRADIUS: Denial of service
2007-04-17 00:00:00
freebsd
freebsd
freeradius -- EAP-TTLS Tunnel Memory Leak Remote DOS Vulnerability
2007-04-10 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
0.016
Percentile
87.5%
Related for UB:CVE-2007-2028