CVE-2017-10983 log

Severity Medium
Remote Yes
Type Denial of service
A security issue has been found in freeradius <= 3.0.15, where the fr_dhcp_decode() function performed a strcmp() on binary data in an internal data structure, instead of checking the length of the option and doing a memcmp. A remote attacker with the ability to send packets which are accepted by the server can make the server read its memory until it reaches a zero byte or crashes, causing a denial of service.
Group Package Affected Fixed Severity Status Ticket
AVG-357 freeradius 3.0.14-4 3.0.15-1 Critical Fixed
Date Advisory Group Package Severity Type
18 Jul 2017 ASA-201707-23 AVG-357 freeradius Critical multiple issues