Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Aug 30, 2017 | Nov 1, 2014 |
| Debian | — | Upgrade freeradius | Jun 5, 2017 | Nov 1, 2014 |
| Gentoo Linux | — | Upgrade net-dialup/freeradius. | Oct 30, 2017 | Nov 1, 2014 |
| Oracle_linux | — | Upgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-perlUpgrade freeradius-postgresql | Oct 16, 2024 | Nov 2, 2014 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Feb 12, 2014 |
| Suse | — | Upgrade freeradius-server-libsUpgrade freeradius-server-docUpgrade freeradius-server-dialupadminUpgrade freeradius-serverUpgrade freeradius-server-perlUpgrade freeradius-server-utilsUpgrade freeradius-server-develUpgrade freeradius-server-ldapUpgrade freeradius-server-krb5Upgrade freeradius-server-mysqlUpgrade freeradius-server-sqliteUpgrade freeradius-server-postgresqlUpgrade freeradius-server-python | Dec 18, 2015 | Apr 14, 2014 |
| Ubuntu | — | Upgrade freeradius | Nov 8, 2024 | Nov 2, 2014 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub