CVE-2017-10986 log

Severity Medium
Remote Yes
Type Denial of service
A security issue has been found in freeradius <= 3.0.15, where the dhcp_attr2vp() function, when decoding "string" options in an array, could be convinced to call memchr() with a length argument of -1. This could result in an over-read until the first zero octet was found, or a page fault occurred.
Group Package Affected Fixed Severity Status Ticket
AVG-357 freeradius 3.0.14-4 3.0.15-1 Critical Fixed
Date Advisory Group Package Severity Type
18 Jul 2017 ASA-201707-23 AVG-357 freeradius Critical multiple issues