---

CVE-2017-10980 - log back

CVE-2017-10980 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Remote
Type	+ Denial of service
Description	+ A security issue has been found in freeradius <= 2.2.9, where thedecode_tlv() function leaked memory in certain circumstances. A remote attacker with the ability of sending DHCP packets which are accepted by the server can cause a memory leak, leading to denial of service.
References	+ http://freeradius.org/security/fuzzer-2017.html#FR-GV-203 + https://github.com/FreeRADIUS/freeradius-server/commit/ef0727fc68e211a36637b5c4e4a6fa1326f0a029
Notes