CVE-2017-10985
HighSummary
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows 'Infinite loop and memory exhaustion with 'concat' attributes', leading to denial of service.
Risk Assessment
Organizations may experience service outages, potentially causing significant disruptions to systems relying on FreeRADIUS.
Recommendation
It is recommended to upgrade FreeRADIUS to version 3.0.15 or later to mitigate this vulnerability.
Other vulnerabilities in FreeRADIUS 3.x before 3.0.15
See all- CVE-2017-10987High
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows for a buffer over-read in the fr_dhcp_decode_suboptions() function, leading to a denial of service.
- CVE-2017-10986High
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows for an infinite read in dhcp_attr2vp(), leading to a denial of service.
- CVE-2017-10984Critical
The FR-GV-301 issue in FreeRADIUS 3.x before version 3.0.15 allows a buffer overflow in the 'data2vp_wimax()' function, potentially leading to a daemon crash or arbitrary code execution by remote attackers.
Original NVD description (English source)
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.