Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown

CVE-2017-10987

Disclosure Date: July 17, 2017 (last updated November 26, 2024)
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
0
0
Attacker Value
Unknown

CVE-2017-10984

Disclosure Date: July 17, 2017 (last updated November 26, 2024)
An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
0
0
Attacker Value
Unknown

CVE-2017-10983

Disclosure Date: July 17, 2017 (last updated November 26, 2024)
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service.
0
0
Attacker Value
Unknown

CVE-2017-10985

Disclosure Date: July 17, 2017 (last updated November 26, 2024)
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
0
0
Attacker Value
Unknown

CVE-2017-10986

Disclosure Date: July 17, 2017 (last updated November 26, 2024)
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.
0
0
Attacker Value
Unknown

CVE-2017-9148

Disclosure Date: May 29, 2017 (last updated November 26, 2024)
The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.
0
0