FreeRADIUS 3.x before 3.0.15 vulnerabilities
4 known CVE vulnerabilities in FreeRADIUS 3.x before 3.0.15, translated and rated.
- CVE-2017-10987High
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows for a buffer over-read in the fr_dhcp_decode_suboptions() function, leading to a denial of service.
- CVE-2017-10986High
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows for an infinite read in dhcp_attr2vp(), leading to a denial of service.
- CVE-2017-10985High
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows 'Infinite loop and memory exhaustion with 'concat' attributes', leading to denial of service.
- CVE-2017-10984Critical
The FR-GV-301 issue in FreeRADIUS 3.x before version 3.0.15 allows a buffer overflow in the 'data2vp_wimax()' function, potentially leading to a daemon crash or arbitrary code execution by remote attackers.

