CVE-2017-10979

Опубликовано: 17 июл. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.

Ссылки

http://freeradius.org/security/fuzzer-2017.html
Patch
Vendor Advisory
http://www.debian.org/security/2017/dsa-3930
http://www.securityfocus.com/bid/99901
http://www.securitytracker.com/id/1038914
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1759
http://freeradius.org/security/fuzzer-2017.html
Patch
Vendor Advisory
http://www.debian.org/security/2017/dsa-3930
http://www.securityfocus.com/bid/99901
http://www.securitytracker.com/id/1038914
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1759

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.8:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.9:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:freeradius:freeradius:2.2.9:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.25821

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2017-10979

CVSS3: 9.8

ubuntu

больше 8 лет назад

CVE-2017-10979

CVSS3: 8.1

redhat

больше 8 лет назад

CVE-2017-10979

CVSS3: 9.8

debian

больше 8 лет назад

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overf ...

GHSA-2fq2-g36f-p2xf

CVSS3: 9.8

github

больше 3 лет назад

SUSE-SU-2017:2244-1

suse-cvrf

около 8 лет назад

Security update for freeradius-server

EPSS

Процентиль: 96%

0.25821

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787