An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 17, 2017 |
| Centos_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius | Aug 28, 2019 | Jul 17, 2017 |
| Debian | — | Upgrade freeradius | Aug 11, 2017 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade freeradius | Nov 30, 2017 | Jul 17, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | Nov 30, 2017 | Jul 17, 2017 |
| Oracle_linux | — | Upgrade freeradius-docUpgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-sqlite | Aug 9, 2017 | Jul 17, 2017 |
| Redhat_linux | — | Upgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-pythonUpgrade freeradius-sqlite | Aug 3, 2017 | Jul 17, 2017 |
| Suse | — | Upgrade freeradius-server-develUpgrade freeradius-server-ldapUpgrade freeradius-server-postgresqlUpgrade freeradius-server-libsUpgrade freeradius-server-sqliteUpgrade freeradius-server-pythonUpgrade freeradius-server-mysqlUpgrade freeradius-server-krb5Upgrade freeradius-server-python3Upgrade freeradius-serverUpgrade freeradius-server-perlUpgrade freeradius-server-docUpgrade freeradius-server-utils | Aug 17, 2017 | Jul 17, 2017 |
| Ubuntu | — | Upgrade freeradius | Jul 27, 2017 | Jul 17, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub