An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
References
| Link | Resource |
|---|---|
| http://freeradius.org/security/fuzzer-2017.html | Patch Vendor Advisory |
| http://www.debian.org/security/2017/dsa-3930 | |
| http://www.securityfocus.com/bid/99901 | |
| http://www.securitytracker.com/id/1038914 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2017:1759 | |
| http://freeradius.org/security/fuzzer-2017.html | Patch Vendor Advisory |
| http://www.debian.org/security/2017/dsa-3930 | |
| http://www.securityfocus.com/bid/99901 | |
| http://www.securitytracker.com/id/1038914 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHSA-2017:1759 |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://freeradius.org/security/fuzzer-2017.html - Patch, Vendor Advisory | |
| References | () http://www.debian.org/security/2017/dsa-3930 - | |
| References | () http://www.securityfocus.com/bid/99901 - | |
| References | () http://www.securitytracker.com/id/1038914 - Third Party Advisory, VDB Entry | |
| References | () https://access.redhat.com/errata/RHSA-2017:1759 - |
Information
Published : 2017-07-17 17:29
Updated : 2025-04-20 01:37
NVD link : CVE-2017-10979
Mitre link : CVE-2017-10979
CVE.ORG link : CVE-2017-10979
JSON object : View
Products Affected
freeradius
- freeradius
CWE
CWE-787
Out-of-bounds Write