CVE-2015-8762

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

Score

CVSS 3.0 5.9 Medium

Status

Modified - cve@mitre.org

Published

2017-03-27

Last modified

2024-08-06

Weaknesses

CWE-476

Affected products

• Freeradius (Freeradius)

References

• http://freeradius.org/security.html#eap-pwd-2015
• http://www.openwall.com/lists/oss-security/2016/01/08/7