CVE-2017-10979

Critical

Published: 17/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The FR-GV-202 issue in FreeRADIUS 2.x before version 2.2.10 allows for a buffer overflow in the rad_coalesce() function. This can lead to a daemon crash or potentially allow remote attackers to execute arbitrary code.

Risk Assessment

Attackers can remotely cause a service outage, leading to system unavailability, and there is also a risk of executing malicious code.

Recommendation

It is recommended to upgrade FreeRADIUS to version 2.2.10 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.