CVE-2015-8763

High

Published: 27/03/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The EAP-PWD module in FreeRADIUS versions 3.0 through 3.0.8 allows remote attackers to have unspecified impact via crafted commit or confirm messages, leading to an out-of-bounds read.

Risk Assessment

Attackers may exploit this vulnerability to gain access to sensitive data or destabilize the operation of the FreeRADIUS server.

Recommendation

It is recommended to update FreeRADIUS to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Other vulnerabilities in FreeRADIUS EAP-PWD module

CVE-2015-8764High
Off-by-one error in the EAP-PWD module in FreeRADIUS from version 3.0 to 3.0.8 leads to a buffer overflow.

Original NVD description (English source)

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.