CVE-2017-10984
CriticalSummary
The FR-GV-301 issue in FreeRADIUS 3.x before version 3.0.15 allows a buffer overflow in the 'data2vp_wimax()' function, potentially leading to a daemon crash or arbitrary code execution by remote attackers.
Risk Assessment
Attackers can remotely cause service outages or gain unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade FreeRADIUS to version 3.0.15 or later to mitigate this vulnerability.
Other vulnerabilities in FreeRADIUS 3.x before 3.0.15
See all- CVE-2017-10987High
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows for a buffer over-read in the fr_dhcp_decode_suboptions() function, leading to a denial of service.
- CVE-2017-10986High
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows for an infinite read in dhcp_attr2vp(), leading to a denial of service.
- CVE-2017-10985High
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows 'Infinite loop and memory exhaustion with 'concat' attributes', leading to denial of service.
Original NVD description (English source)
An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.