Описание
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | freeradius | Out of support scope | ||
| Red Hat Enterprise Linux 7 | freeradius | Out of support scope | ||
| Red Hat Enterprise Linux 8 | freeradius | Fixed | RHSA-2023:2870 | 16.05.2023 |
| Red Hat Enterprise Linux 9 | freeradius | Fixed | RHSA-2023:2166 | 09.05.2023 |
Показывать по
10
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=2078487freeradius: Crash on invalid abinary data
EPSS
Процентиль: 55%
0.00322
Низкий
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 6.5
ubuntu
больше 2 лет назад
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS3: 6.5
nvd
больше 2 лет назад
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS3: 6.5
debian
больше 2 лет назад
A flaw was found in freeradius. A malicious RADIUS client or home serv ...
CVSS3: 6.5
github
больше 2 лет назад
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
EPSS
Процентиль: 55%
0.00322
Низкий
7.5 High
CVSS3