CVE Catalog
CVE-2017-10984
CriticalSummary
The FR-GV-301 issue in FreeRADIUS 3.x before version 3.0.15 allows a buffer overflow in the 'data2vp_wimax()' function, potentially leading to a daemon crash or arbitrary code execution by remote attackers.
Risk Assessment
Attackers can remotely cause service outages or gain unauthorized access to the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade FreeRADIUS to version 3.0.15 or later to mitigate this vulnerability.
Original NVD description (English source)
An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.