CVE-2015-8763

Опубликовано: 27 мар. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.

Ссылки

http://freeradius.org/security.html#eap-pwd-2015
Not Applicable
http://www.openwall.com/lists/oss-security/2016/01/08/7
Mailing List
Patch
Third Party Advisory
http://freeradius.org/security.html#eap-pwd-2015
Not Applicable
http://www.openwall.com/lists/oss-security/2016/01/08/7
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.0055

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2015-8763

CVSS3: 8.1

ubuntu

почти 9 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.

CVE-2015-8763

redhat

почти 11 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.

CVE-2015-8763

CVSS3: 8.1

debian

почти 9 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attac ...

GHSA-w3mc-69cg-f45j

CVSS3: 8.1

github

больше 3 лет назад

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.

EPSS

Процентиль: 67%

0.0055

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-125