CVE-2017-10987: High severity freeradius vulnerability
An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in frdhcpdecodesuboptions()" and a denial of service.
Other sources
The frdhcpdecodesuboptions() function does not properly check if sub-options overflow the packet. The server can read up to a small number of octets more data than it should. Depending on memory layout, this read may initiate a page fault, and cause the server to crash.
The security impact is denial of service by any network device capable of sending DHCP packets to FreeRADIUS, which sends packets with malformed options.
Affected versions: 3.0.0 through 3.0.14, inclusive.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10987?
CVE-2017-10987 has been classified as a denial of service vulnerability affecting FreeRADIUS versions prior to 3.0.15.
How do I fix CVE-2017-10987?
To fix CVE-2017-10987, upgrade to FreeRADIUS version 3.0.15 or later.
Which versions of FreeRADIUS are affected by CVE-2017-10987?
FreeRADIUS versions 3.0.0 through 3.0.14 are vulnerable to CVE-2017-10987.
What type of issue does CVE-2017-10987 represent?
CVE-2017-10987 represents a buffer over-read vulnerability in the fr_dhcp_decode_suboptions() function.
Can CVE-2017-10987 be exploited remotely?
Yes, CVE-2017-10987 could potentially be exploited remotely leading to a denial of service condition.