CVE-2017-10985: High severity freeradius vulnerability
An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
Other sources
When the server receives zero-length attributes marked 'concat' in the dictionaries, it could go into an infinite loop and exhaust memory. The issue happens when the server receives a packet containing the following attribute data: 4f 02, 89 02, 90 02, or b4 02.
The security impact is denial of service by anyone who can send packets which are accepted by the server.
Affected versions: 3.0.0 through 3.0.14, inclusive.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10985?
CVE-2017-10985 is classified as a denial of service vulnerability due to an infinite loop and memory exhaustion.
How do I fix CVE-2017-10985?
To fix CVE-2017-10985, upgrade FreeRADIUS to version 3.0.15 or later.
What versions of FreeRADIUS are affected by CVE-2017-10985?
CVE-2017-10985 affects FreeRADIUS versions 3.0.0 through 3.0.14.
What is the nature of the vulnerability found in CVE-2017-10985?
CVE-2017-10985 involves an infinite loop and excessive memory consumption triggered by zero-length attributes marked 'concat'.
Can CVE-2017-10985 be exploited remotely?
Yes, CVE-2017-10985 can be exploited remotely, leading to potential denial of service on affected FreeRADIUS servers.