CVE-2015-8762

Опубликовано: 27 мар. 2017

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

Ссылки

http://freeradius.org/security.html#eap-pwd-2015
Not Applicable
http://www.openwall.com/lists/oss-security/2016/01/08/7
Mailing List
Patch
Third Party Advisory
http://freeradius.org/security.html#eap-pwd-2015
Not Applicable
http://www.openwall.com/lists/oss-security/2016/01/08/7
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00495

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2015-8762

CVSS3: 5.9

ubuntu

почти 9 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

CVE-2015-8762

redhat

почти 11 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

CVE-2015-8762

CVSS3: 5.9

debian

почти 9 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attac ...

GHSA-934x-42xg-xxfr

CVSS3: 5.9

github

больше 3 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

EPSS

Процентиль: 65%

0.00495

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476