The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to CVE-2003-0967.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Freeradius | — | Apply OS X security update 2009-006 | Dec 16, 2011 | Sep 9, 2009 |
| Centos_linux | — | Upgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-mysql | Dec 1, 2016 | Sep 9, 2009 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Sep 9, 2009 |
| Freebsd | — | Upgrade freeradius | Dec 10, 2025 | Dec 14, 2009 |
| Oracle_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-mysql | Oct 16, 2024 | Sep 9, 2009 |
| Suse | — | Upgrade freeradius-develUpgrade freeradius-dialupadminUpgrade freeradius | Feb 17, 2015 | Sep 9, 2009 |
| Ubuntu | — | Upgrade freeradius | Nov 8, 2024 | Sep 9, 2009 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub