An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux | — | Upgrade freeradius | Aug 4, 2017 | Jul 17, 2017 |
| Centos_linux | — | Upgrade freeradius-pythonUpgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-ldap | Jul 20, 2017 | Jul 17, 2017 |
| Debian | — | Upgrade freeradius | Aug 11, 2017 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-ldapUpgrade freeradius-mysql | Jul 19, 2017 | Jul 17, 2017 |
| Redhat_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-debuginfoUpgrade freeradiusUpgrade freeradius-perlNo solution existsUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-pythonUpgrade freeradius-ldap | Jul 18, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade freeradius | Jul 27, 2017 | Jul 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub