Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2007-2028
HistoryApr 13, 2007 - 6:19 p.m.

CVE-2007-2028

2007-04-1318:19:00
redhat
web.nvd.nist.gov
30
cve-2007-2028
freeradius
memory leak
denial of service
nvd
eap-ttls
diameter format
attribute
security

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUE_PAIR data structures.

Affected configurations

Nvd
Node
freeradiusfreeradiusRange≤1.1.5
VendorProductVersionCPE
freeradiusfreeradius*cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*

Related

openvas 11
nessus 11
securityvulns 1
oraclelinux 1
veracode 1
redhat 1
cvelist 1
ubuntucve 1
fedora 1
debiancve 1
nvd 1
prion 1
centos 1
gentoo 1
freebsd 1
openvas
openvas
Gentoo Security Advisory GLSA 200704-14 (FreeRADIUS)
2008-09-24 00:00:00
Mandriva Update for freeradius MDKSA-2007:085 (freeradius)
2009-04-09 00:00:00
Oracle: Security Advisory (ELSA-2007-0338)
2015-10-08 00:00:00
nessus
nessus
SuSE 10 Security Update : freeradius (ZYPP Patch Number 3287)
2007-12-13 00:00:00
Fedora Core 6 : freeradius-1.1.3-2.fc6 (2007-499)
2007-05-16 00:00:00
openSUSE 10 Security Update : freeradius (freeradius-3286)
2007-10-17 00:00:00
securityvulns
securityvulns
FreeRADIUS memory leak
2007-04-16 00:00:00
oraclelinux
oraclelinux
Moderate: freeradius security update
2007-05-10 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:15:55
redhat
redhat
(RHSA-2007:0338) Moderate: freeradius security update
2007-05-10 00:00:00
cvelist
cvelist
CVE-2007-2028
2007-04-13 18:00:00
ubuntucve
ubuntucve
CVE-2007-2028
2007-04-13 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: freeradius-1.1.3-2.fc6
2007-05-14 17:06:05
debiancve
debiancve
CVE-2007-2028
2007-04-13 18:19:00
nvd
nvd
CVE-2007-2028
2007-04-13 18:19:00
prion
prion
Design/Logic Flaw
2007-04-13 18:19:00
centos
centos
freeradius security update
2007-05-10 16:23:13
gentoo
gentoo
FreeRADIUS: Denial of service
2007-04-17 00:00:00
freebsd
freebsd
freeradius -- EAP-TTLS Tunnel Memory Leak Remote DOS Vulnerability
2007-04-10 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON
Related for CVE-2007-2028
openvas11nessus11securityvulns1oraclelinux1veracode1redhat1cvelist1ubuntucve1fedora1debiancve1nvd1prion1centos1gentoo1freebsd1