#VU7559 Infinite loop in FreeRADIUS - CVE-2017-10985
Published: July 18, 2017
Vulnerability identifier: #VU7559
Vulnerability risk: Medium
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2017-10985
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerable software:
FreeRADIUS
FreeRADIUS
Software vendor:
FreeRADIUS Server Project
FreeRADIUS Server Project
Description
The vulnerability allows a remote attacker to perform a denial of service attack.
The vulnerability exists due to infinite loop when processing specially crafted RADIUS packets. A remote attacker can send 4f 02, 89 02, 90 02, or b4 02 attribute data and perform a denial of service attack.
Successful exploitation of the vulnerability may allow an attacker to exhaust all available memory on the system and render the system unresponsive.
The vulnerability exists due to infinite loop when processing specially crafted RADIUS packets. A remote attacker can send 4f 02, 89 02, 90 02, or b4 02 attribute data and perform a denial of service attack.
Successful exploitation of the vulnerability may allow an attacker to exhaust all available memory on the system and render the system unresponsive.
Remediation
Update to version 3.0.15.