Lucene search
HistoryJul 17, 2017 - 5:29 p.m.
CVE-2017-10983
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.5
Confidence
High
EPSS
0.005
Percentile
77.2%
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows “DHCP - Read overflow when decoding option 63” and a denial of service.
Affected configurations
Node
freeradiusfreeradiusMatch2.0.0
ORfreeradiusfreeradiusMatch2.0.0pre1
ORfreeradiusfreeradiusMatch2.0.0pre2
ORfreeradiusfreeradiusMatch2.0.1
ORfreeradiusfreeradiusMatch2.0.2
ORfreeradiusfreeradiusMatch2.0.3
ORfreeradiusfreeradiusMatch2.0.4
ORfreeradiusfreeradiusMatch2.0.5
ORfreeradiusfreeradiusMatch2.1.0
ORfreeradiusfreeradiusMatch2.1.1
ORfreeradiusfreeradiusMatch2.1.2
ORfreeradiusfreeradiusMatch2.1.3
ORfreeradiusfreeradiusMatch2.1.4
ORfreeradiusfreeradiusMatch2.1.6
ORfreeradiusfreeradiusMatch2.1.7
ORfreeradiusfreeradiusMatch2.1.8
ORfreeradiusfreeradiusMatch2.1.9
ORfreeradiusfreeradiusMatch2.1.10
ORfreeradiusfreeradiusMatch2.1.11
ORfreeradiusfreeradiusMatch2.1.12
ORfreeradiusfreeradiusMatch2.2.0
ORfreeradiusfreeradiusMatch2.2.1
ORfreeradiusfreeradiusMatch2.2.2
ORfreeradiusfreeradiusMatch2.2.3
ORfreeradiusfreeradiusMatch2.2.4
ORfreeradiusfreeradiusMatch2.2.5
ORfreeradiusfreeradiusMatch2.2.6
ORfreeradiusfreeradiusMatch2.2.7
ORfreeradiusfreeradiusMatch2.2.8
ORfreeradiusfreeradiusMatch2.2.9
ORfreeradiusfreeradiusMatch3.0.0
ORfreeradiusfreeradiusMatch3.0.1
ORfreeradiusfreeradiusMatch3.0.2
ORfreeradiusfreeradiusMatch3.0.3
ORfreeradiusfreeradiusMatch3.0.4
ORfreeradiusfreeradiusMatch3.0.5
ORfreeradiusfreeradiusMatch3.0.6
ORfreeradiusfreeradiusMatch3.0.7
ORfreeradiusfreeradiusMatch3.0.8
ORfreeradiusfreeradiusMatch3.0.9
ORfreeradiusfreeradiusMatch3.0.10
ORfreeradiusfreeradiusMatch3.0.11
ORfreeradiusfreeradiusMatch3.0.12
ORfreeradiusfreeradiusMatch3.0.13
ORfreeradiusfreeradiusMatch3.0.14
| Vendor | Product | Version | CPE |
|---|---|---|---|
| freeradius | freeradius | 2.0.0 | cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:* |
| freeradius | freeradius | 2.0.0 | cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:* |
| freeradius | freeradius | 2.0.0 | cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:* |
| freeradius | freeradius | 2.0.1 | cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:* |
| freeradius | freeradius | 2.0.2 | cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:* |
| freeradius | freeradius | 2.0.3 | cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:* |
| freeradius | freeradius | 2.0.4 | cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:* |
| freeradius | freeradius | 2.0.5 | cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:* |
| freeradius | freeradius | 2.1.0 | cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:* |
| freeradius | freeradius | 2.1.1 | cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:* |
Related
osv
osv
CVE-2017-10983
2017-07-17 17:29:00
freeradius - security update
2017-08-10 00:00:00
freeradius - security update
2017-08-25 00:00:00
ubuntucve
ubuntucve
CVE-2017-10983
2017-07-17 00:00:00
redhatcve
redhatcve
CVE-2017-10983
2019-10-11 16:53:58
veracode
veracode
Denial Of Service (DoS)
2019-05-02 06:30:37
prion
prion
Buffer overflow
2017-07-17 17:29:00
cvelist
cvelist
CVE-2017-10983
2017-07-17 16:00:00
cve
cve
CVE-2017-10983
2017-07-17 17:29:00
debiancve
debiancve
CVE-2017-10983
2017-07-17 17:29:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2017:2244-1)
2021-06-09 00:00:00
CentOS Update for freeradius CESA-2017:1759 centos6
2017-07-20 00:00:00
RedHat Update for freeradius RHSA-2017:1759-01
2017-07-18 00:00:00
nessus
nessus
SUSE SLES11 Security Update : freeradius-server (SUSE-SU-2017:2244-1)
2017-08-24 00:00:00
Scientific Linux Security Update : freeradius on SL7.x x86_64 (20170802)
2017-08-22 00:00:00
Oracle Linux 6 : freeradius (ELSA-2017-1759)
2017-07-19 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: freeradius-3.0.15-1.fc25
2017-07-27 21:54:09
[SECURITY] Fedora 26 Update: freeradius-3.0.15-1.fc26
2017-07-27 16:54:18
debian
debian
[SECURITY] [DLA 1064-1] freeradius security update
2017-08-25 17:46:20
[SECURITY] [DSA 3930-1] freeradius security update
2017-08-10 14:48:43
[SECURITY] [DSA 3930-1] freeradius security update
2017-08-10 14:48:43
redhat
redhat
(RHSA-2017:2389) Important: freeradius security update
2017-08-01 14:36:42
(RHSA-2017:1759) Important: freeradius security update
2017-07-18 02:27:56
amazon
amazon
Important: freeradius
2017-08-03 19:11:00
centos
centos
freeradius security update
2017-07-19 14:29:47
freeradius security update
2017-08-24 09:43:49
oraclelinux
oraclelinux
freeradius security update
2017-07-18 00:00:00
freeradius security update
2017-08-09 00:00:00
archlinux
archlinux
[ASA-201707-23] freeradius: multiple issues
2017-07-18 00:00:00
suse
suse
Security update for freeradius-server (important)
2017-08-28 15:07:53
Security update for freeradius-server (important)
2017-08-17 12:15:26
ubuntu
ubuntu
FreeRADIUS vulnerabilities
2017-07-27 00:00:00
mageia
mageia
Updated freeradius packages fix security vulnerabilities
2017-07-30 18:58:51
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
8.5
Confidence
High
EPSS
0.005
Percentile
77.2%
Related for NVD:CVE-2017-10983