Name: CVE-2017-10986: Loop with Unreachable Exit Condition
Creator: Rapid7
Published: 2017-07-17T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-10986, CWE-835, CVSS 7.5, EPSS 0.02988

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.

CVSS Details

CVSS 3.0 Base Score: 7.5
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Arch Linux	—	Upgrade to the latest version of Arch Linux	Jul 11, 2025	Jul 17, 2017
Centos_linux	—	Upgrade freeradius-mysqlUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-perlUpgrade freeradius-pythonUpgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-debuginfoUpgrade freeradius-sqlite	Aug 28, 2019	Jul 17, 2017
Debian	—	Upgrade freeradius	Aug 11, 2017	Jul 17, 2017
Huawei Euleros 2_0_sp1	—	Upgrade freeradius	Nov 30, 2017	Jul 17, 2017
Huawei Euleros 2_0_sp2	—	Upgrade freeradius	Nov 30, 2017	Jul 17, 2017
Oracle_linux	—	Upgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-ldap	Aug 9, 2017	Jul 17, 2017
Redhat_linux	—	No solution existsUpgrade freeradius-ldapUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-debuginfoUpgrade freeradius-pythonUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-sqliteUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradius-mysql	Aug 3, 2017	Jul 17, 2017
Suse	—	Upgrade freeradius-server-ldapUpgrade freeradius-server-utilsUpgrade freeradius-server-libsUpgrade freeradius-server-pythonUpgrade freeradius-serverUpgrade freeradius-server-python3Upgrade freeradius-server-docUpgrade freeradius-server-sqliteUpgrade freeradius-server-mysqlUpgrade freeradius-server-postgresqlUpgrade freeradius-server-perlUpgrade freeradius-server-krb5Upgrade freeradius-server-devel	Aug 17, 2017	Jul 17, 2017
Ubuntu	—	Upgrade freeradius	Jul 27, 2017	Jul 17, 2017

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence