3.0.0 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2017-10987	125	DoS	2017-07-17	2019-10-03	5.0	None	Remote	Low	Not required	None	None	Partial
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
2	CVE-2017-10986	835	DoS	2017-07-17	2019-10-03	5.0	None	Remote	Low	Not required	None	None	Partial
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.
3	CVE-2017-10985	835	DoS	2017-07-17	2019-10-03	7.8	None	Remote	Low	Not required	None	None	Complete
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
4	CVE-2017-10984	787	DoS Exec Code Overflow	2017-07-17	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
5	CVE-2017-10983	119	DoS Overflow	2017-07-17	2018-01-05	5.0	None	Remote	Low	Not required	None	None	Partial
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service.
6	CVE-2017-9148	287	Bypass	2017-05-29	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.
7	CVE-2015-8764	119	Overflow	2017-03-27	2017-03-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.
8	CVE-2015-8763	125		2017-03-27	2017-03-30	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.
9	CVE-2015-8762	476	DoS	2017-03-27	2017-03-30	4.3	None	Remote	Medium	Not required	None	None	Partial
The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.
10	CVE-2015-4680	295		2017-04-05	2018-10-09	5.0	None	Remote	Low	Not required	None	Partial	None
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
11	CVE-2014-2015	119	DoS Exec Code Overflow	2014-11-02	2018-01-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.

Total number of vulnerabilities : 11 Page : 1 (This Page)