Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2003-0967

Опубликовано: 15 дек. 2003
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*
Версия до 0.9.2 (включая)

EPSS

Процентиль: 88%
0.04403
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu
больше 21 года назад

FreeRadius DoS

redhat
больше 21 года назад

rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.

debian
больше 21 года назад

rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to ...

github
около 3 лет назад

rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.

EPSS

Процентиль: 88%
0.04403
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other