The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to CVE-2003-0967.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Freeradius | — | Apply OS X security update 2009-006 | Dec 16, 2011 | Sep 9, 2009 |
| Centos_linux | — | Upgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-mysql | Dec 1, 2016 | Sep 9, 2009 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Sep 9, 2009 |
| Freebsd | — | Upgrade freeradius | Dec 10, 2025 | Dec 14, 2009 |
| Oracle_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius | Oct 16, 2024 | Sep 9, 2009 |
| Suse | — | Upgrade freeradiusUpgrade freeradius-develUpgrade freeradius-dialupadmin | Feb 17, 2015 | Sep 9, 2009 |
| Ubuntu | — | Upgrade freeradius | Nov 8, 2024 | Sep 9, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub