CVE-2017-10981: High severity freeradius vulnerability
An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in frdhcpdecode()" and a denial of service.
Other sources
It was discovered that if option decoding fails, the frdhcpdecode() function would leak memory.
The security impact is denial of service via memory exhaustion by any network device capable of sending DHCP packets to FreeRADIUS, which sends packets with malformed options.
Affected versions: 2.0.0 through 2.2.9, inclusive.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10981?
CVE-2017-10981 has a severity that can lead to denial of service via memory exhaustion.
How do I fix CVE-2017-10981?
To fix CVE-2017-10981, upgrade FreeRADIUS to version 2.2.10 or later.
Which versions of FreeRADIUS are affected by CVE-2017-10981?
Affected versions include FreeRADIUS 2.0.0 through 2.2.9.
What is the impact of CVE-2017-10981?
The impact of CVE-2017-10981 is that it allows for memory leaks leading to potential denial of service.
Can CVE-2017-10981 be exploited remotely?
Yes, CVE-2017-10981 can be exploited remotely by any network attacker.