Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Aug 30, 2017 | Nov 1, 2014 |
| Debian | — | Upgrade freeradius | Jun 5, 2017 | Nov 1, 2014 |
| Gentoo Linux | — | Upgrade net-dialup/freeradius. | Oct 30, 2017 | Nov 1, 2014 |
| Oracle_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-pythonUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-postgresql | Oct 16, 2024 | Nov 2, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 12, 2014 |
| Suse | — | Upgrade freeradius-server-perlUpgrade freeradius-server-develUpgrade freeradius-server-docUpgrade freeradius-server-dialupadminUpgrade freeradius-server-utilsUpgrade freeradius-server-libsUpgrade freeradius-serverUpgrade freeradius-server-ldapUpgrade freeradius-server-pythonUpgrade freeradius-server-postgresqlUpgrade freeradius-server-sqliteUpgrade freeradius-server-krb5Upgrade freeradius-server-mysql | Dec 18, 2015 | Apr 14, 2014 |
| Ubuntu | — | Upgrade freeradius | Nov 8, 2024 | Nov 2, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub