CVE-2017-10982: High severity freeradius vulnerability
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in frdhcpdecodeoptions()" and a denial of service.
Other sources
The frdhcpdecodeoptions() function does not do proper bounds checks on option lengths, leading to out-of-bounds read.
The server can read up to 253 octets more data than it should. Depending on memory layout, this read may initiate a page fault, and cause the server to crash.
The security impact is denial of service by any network device capable of sending DHCP packets to FreeRADIUS, which sends packets with malformed options.
Affected versions: 2.0.0 through 2.2.9, inclusive.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10982?
CVE-2017-10982 has a high severity rating due to the potential for denial of service vulnerabilities.
How do I fix CVE-2017-10982?
To fix CVE-2017-10982, upgrade FreeRADIUS to version 2.2.10 or later.
Which versions of FreeRADIUS are affected by CVE-2017-10982?
FreeRADIUS versions before 2.2.10, including all versions from 2.0.0 to 2.2.9, are affected by CVE-2017-10982.
What type of vulnerability is associated with CVE-2017-10982?
CVE-2017-10982 is a buffer over-read vulnerability that can lead to out-of-bounds reads.
Can CVE-2017-10982 be exploited remotely?
Yes, CVE-2017-10982 can potentially be exploited remotely, leading to denial of service.