CVE-2017-10980 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Denial of service |
| Description | A security issue has been found in freeradius <= 2.2.9, where thedecode_tlv() function leaked memory in certain circumstances. A remote attacker with the ability of sending DHCP packets which are accepted by the server can cause a memory leak, leading to denial of service. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-934 | freeradius | 2.2.0-1 | 2.2.9-1 | Critical | Fixed |
| References |
|---|
http://freeradius.org/security/fuzzer-2017.html#FR-GV-203 https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637b5c4e4a6fa1326f0a029 |