CVE-2015-8763: High severity freeradius vulnerability
Published Mar 27, 2017
·Updated
The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.
Affected Software
9 affected components
FreeRADIUS freeradius=3.0.0
FreeRADIUS freeradius=3.0.1
FreeRADIUS freeradius=3.0.2
FreeRADIUS freeradius=3.0.3
FreeRADIUS freeradius=3.0.4
FreeRADIUS freeradius=3.0.5
FreeRADIUS freeradius=3.0.6
FreeRADIUS freeradius=3.0.7
FreeRADIUS freeradius=3.0.8
Remediation
Patch Available
Event History
Mar 27, 2017
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8763?
CVE-2015-8763 has been classified as having a medium severity due to its potential impact on system stability.
2
How do I fix CVE-2015-8763?
To fix CVE-2015-8763, upgrade FreeRADIUS to version 3.0.9 or later.
3
What systems are affected by CVE-2015-8763?
CVE-2015-8763 affects FreeRADIUS versions 3.0.0 to 3.0.8.
4
Can CVE-2015-8763 be exploited remotely?
Yes, CVE-2015-8763 can be exploited by remote attackers through crafted commit or confirm messages.
5
What type of vulnerability is CVE-2015-8763?
CVE-2015-8763 is characterized as an out-of-bounds read vulnerability.