CVE-2017-10987
HighSummary
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows for a buffer over-read in the fr_dhcp_decode_suboptions() function, leading to a denial of service.
Risk Assessment
This vulnerability may lead to disruption of DHCP service, potentially affecting network availability within the organization.
Recommendation
It is recommended to upgrade FreeRADIUS to version 3.0.15 or later to mitigate this vulnerability.
Other vulnerabilities in FreeRADIUS 3.x before 3.0.15
See all- CVE-2017-10986High
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows for an infinite read in dhcp_attr2vp(), leading to a denial of service.
- CVE-2017-10985High
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows 'Infinite loop and memory exhaustion with 'concat' attributes', leading to denial of service.
- CVE-2017-10984Critical
The FR-GV-301 issue in FreeRADIUS 3.x before version 3.0.15 allows a buffer overflow in the 'data2vp_wimax()' function, potentially leading to a daemon crash or arbitrary code execution by remote attackers.
Original NVD description (English source)
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.