CVE-2017-10983: Buffer Overflow
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service.
Other sources
The frdhcpdecode() function performed a strcmp() on binary data in an internal data structure, instead of checking the length of the option and doing a memcmp. The server can read memory until it reaches a zero byte. Depending on memory layout, this read may initiate a page fault, and cause the server to crash.
The security impact is denial of service by any network device capable of sending DHCP packets to FreeRADIUS, which sends a DHCP option 63 with non-zero contents.
Affected versions: 2.0.0 through 3.0.14, inclusive.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10983?
CVE-2017-10983 is classified as a denial-of-service vulnerability within FreeRADIUS.
How do I fix CVE-2017-10983?
To mitigate CVE-2017-10983, upgrade to FreeRADIUS version 2.2.10 or 3.0.15 or later.
Which FreeRADIUS versions are affected by CVE-2017-10983?
CVE-2017-10983 affects FreeRADIUS versions 2.x before 2.2.10 and 3.x before 3.0.15.
What systems are impacted by CVE-2017-10983?
Systems running vulnerable versions of FreeRADIUS that handle DHCP options may be impacted by CVE-2017-10983.
What kind of attack can exploit CVE-2017-10983?
An attacker can exploit CVE-2017-10983 via a specially crafted DHCP option, leading to a potential denial of service.