CVE-2017-10978

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-119

Affected products

• Debian Linux (Debian)
• Freeradius (Freeradius)
• Enterprise Linux Desktop (Redhat)
• Enterprise Linux Server (Redhat)
• Enterprise Linux Server Aus (Redhat)
• Enterprise Linux Server Eus (Redhat)
• Enterprise Linux Server Tus (Redhat)
• Enterprise Linux Workstation (Redhat)

References

• http://freeradius.org/security/fuzzer-2017.html
• http://www.debian.org/security/2017/dsa-3930
• http://www.securityfocus.com/bid/99893
• http://www.securitytracker.com/id/1038914
• https://access.redhat.com/errata/RHSA-2017:1759
• https://access.redhat.com/errata/RHSA-2017:2389