CVE-2015-8764

Опубликовано: 27 мар. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.

Ссылки

http://freeradius.org/security.html#eap-pwd-2015
Not Applicable
http://www.openwall.com/lists/oss-security/2016/01/08/7
Mailing List
Patch
Third Party Advisory
http://freeradius.org/security.html#eap-pwd-2015
Not Applicable
http://www.openwall.com/lists/oss-security/2016/01/08/7
Mailing List
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00471

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2015-8764

CVSS3: 8.1

ubuntu

почти 9 лет назад

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.

CVE-2015-8764

redhat

почти 11 лет назад

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.

CVE-2015-8764

CVSS3: 8.1

debian

почти 9 лет назад

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 ...

GHSA-3rpp-wj27-m2p9

CVSS3: 8.1

github

больше 3 лет назад

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.

EPSS

Процентиль: 64%

0.00471

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119