Infinite loop in FreeRADIUS - CVE-2017-10985
Published: July 18, 2017
Vulnerability identifier: #VU7559
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-10985
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to infinite loop when processing specially crafted RADIUS packets. A remote attacker can send 4f 02, 89 02, 90 02, or b4 02 attribute data and perform a denial of service attack.
Successful exploitation of the vulnerability may allow an attacker to exhaust all available memory on the system and render the system unresponsive.
The vulnerability exists due to infinite loop when processing specially crafted RADIUS packets. A remote attacker can send 4f 02, 89 02, 90 02, or b4 02 attribute data and perform a denial of service attack.
Successful exploitation of the vulnerability may allow an attacker to exhaust all available memory on the system and render the system unresponsive.
Affected software
FreeRADIUS
Debian Linux
SUSE Linux
Ubuntu
Fedora
freeradius
Debian Linux
SUSE Linux
Ubuntu
Fedora
freeradius
How to mitigate CVE-2017-10985
Update to version 3.0.15.
freeradius - addressed in versions 3.0.15-1.fc25, 3.0.15-1.fc26