CVE-2017-10986
HighSummary
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows for an infinite read in dhcp_attr2vp(), leading to a denial of service.
Risk Assessment
Exploitation of this vulnerability may result in the unavailability of the FreeRADIUS service, impacting the entire network infrastructure of the organization.
Recommendation
It is recommended to upgrade FreeRADIUS to version 3.0.15 or later to mitigate this vulnerability.
Other vulnerabilities in FreeRADIUS 3.x before 3.0.15
See all- CVE-2017-10987High
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows for a buffer over-read in the fr_dhcp_decode_suboptions() function, leading to a denial of service.
- CVE-2017-10985High
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows 'Infinite loop and memory exhaustion with 'concat' attributes', leading to denial of service.
- CVE-2017-10984Critical
The FR-GV-301 issue in FreeRADIUS 3.x before version 3.0.15 allows a buffer overflow in the 'data2vp_wimax()' function, potentially leading to a daemon crash or arbitrary code execution by remote attackers.
Original NVD description (English source)
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.