Infinite loop in FreeRADIUS - CVE-2017-10985
Published: July 18, 2017
Vulnerability identifier: #VU7559
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2017-10985
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: FreeRADIUS Server Project
Affected software:
FreeRADIUS
FreeRADIUS
Detailed vulnerability description
The vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to infinite loop when processing specially crafted RADIUS packets. A remote attacker can send 4f 02, 89 02, 90 02, or b4 02 attribute data and perform a denial of service attack.
Successful exploitation of the vulnerability may allow an attacker to exhaust all available memory on the system and render the system unresponsive.
The vulnerability exists due to infinite loop when processing specially crafted RADIUS packets. A remote attacker can send 4f 02, 89 02, 90 02, or b4 02 attribute data and perform a denial of service attack.
Successful exploitation of the vulnerability may allow an attacker to exhaust all available memory on the system and render the system unresponsive.
How to mitigate CVE-2017-10985
Update to version 3.0.15.