Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:11194
HistoryJan 15, 2019 - 8:58 a.m.

Denial Of Service (DoS)

2019-01-1508:58:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON

freeradius is vulnerable to denial of service (DoS) attacks. The vulnerability exists as a stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long “not after” timestamp in a client certificate.

References

Related

openvas 27
nessus 20
suse 1
debian 1
amazon 1
redhat 2
securityvulns 3
ubuntucve 1
cve 1
checkpoint_advisories 1
altlinux 1
oraclelinux 3
debiancve 1
fedora 3
ubuntu 1
centos 2
freebsd 1
prion 1
gentoo 1
openvas
openvas
Mandriva Update for freeradius MDVSA-2012:159 (freeradius)
2012-10-05 00:00:00
Ubuntu Update for freeradius USN-1585-1
2012-09-27 00:00:00
CentOS Update for freeradius2 CESA-2012:1327 centos5
2012-10-03 00:00:00
nessus
nessus
Oracle Linux 5 : freeradius2 (ELSA-2012-1327)
2013-07-12 00:00:00
Mandriva Linux Security Advisory : freeradius (MDVSA-2012:159)
2012-10-04 00:00:00
openSUSE Security Update : freeradius (openSUSE-SU-2012:1200-1)
2014-06-13 00:00:00
suse
suse
freeradius: fix stack overflow in TLS handling (important)
2012-09-18 11:08:34
debian
debian
[SECURITY] [DSA 2546-1] freeradius security update
2012-09-11 18:38:27
amazon
amazon
Medium: freeradius
2012-10-08 10:40:00
redhat
redhat
(RHSA-2012:1327) Moderate: freeradius2 security update
2012-10-02 00:00:00
(RHSA-2012:1326) Moderate: freeradius security update
2012-10-02 00:00:00
securityvulns
securityvulns
FreeRADIUS buffer overflow
2012-09-18 00:00:00
[PRE-SA-2012-06] FreeRADIUS: Stack Overflow in TLS-based EAP Methods
2012-09-18 00:00:00
[SECURITY] [DSA 2546-1] freeradius security update
2012-09-18 00:00:00
ubuntucve
ubuntucve
CVE-2012-3547
2012-09-18 00:00:00
cve
cve
CVE-2012-3547
2012-09-18 17:55:00
checkpoint_advisories
checkpoint_advisories
FreeRADIUS Client Certificate Verification Stack Buffer Overflow (CVE-2012-3547)
2012-11-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package freeradius version 2.1.10-alt3.M60P.1
2012-09-14 00:00:00
oraclelinux
oraclelinux
freeradius security update
2012-10-02 00:00:00
freeradius2 security update
2012-10-02 00:00:00
freeradius2 security and bug fix update
2013-01-11 00:00:00
debiancve
debiancve
CVE-2012-3547
2012-09-18 17:55:00
fedora
fedora
[SECURITY] Fedora 16 Update: freeradius-2.2.0-0.fc16
2012-10-18 00:21:31
[SECURITY] Fedora 17 Update: freeradius-2.2.0-0.fc17
2012-10-23 01:50:38
[SECURITY] Fedora 18 Update: freeradius-2.2.0-0.fc18
2012-10-23 08:45:12
ubuntu
ubuntu
FreeRADIUS vulnerability
2012-09-26 00:00:00
centos
centos
freeradius2 security update
2012-10-03 01:47:30
freeradius security update
2012-10-03 03:29:55
freebsd
freebsd
freeradius -- arbitrary code execution for TLS-based authentication
2012-09-10 00:00:00
prion
prion
Stack overflow
2012-09-18 17:55:00
gentoo
gentoo
FreeRADIUS: Multiple vulnerabilities
2013-11-13 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

JSON
Related for VERACODE:11194
openvas27nessus20suse1debian1amazon1redhat2securityvulns3ubuntucve1cve1checkpoint_advisories1altlinux1oraclelinux3debiancve1fedora3ubuntu1centos2freebsd1prion1gentoo1