FreeRADIUS Multiple Denial of Service Vulnerabilities
BID:43645
Info
FreeRADIUS Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 43645 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2010 12:00AM |
| Updated: | Oct 01 2010 12:00AM |
| Credit: | Florence Faure, Ilya A. Masandilov |
| Vulnerable: |
FreeRADIUS FreeRADIUS 2.1.9 |
| Not Vulnerable: |
FreeRADIUS FreeRADIUS 2.1.10 |
Discussion
FreeRADIUS Multiple Denial of Service Vulnerabilities
FreeRADIUS is prone to multiple denial-of-service vulnerabilities.
Attackers can exploit these issues to crash an affected system, denying service to legitimate users.
FreeRADIUS 2.1.9 is vulnerable; other versions may also be affected.
FreeRADIUS is prone to multiple denial-of-service vulnerabilities.
Attackers can exploit these issues to crash an affected system, denying service to legitimate users.
FreeRADIUS 2.1.9 is vulnerable; other versions may also be affected.
Exploit / POC
FreeRADIUS Multiple Denial of Service Vulnerabilities
Attackers can exploit these issues, using readily available tools.
Attackers can exploit these issues, using readily available tools.
Solution / Fix
FreeRADIUS Multiple Denial of Service Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
FreeRADIUS Multiple Denial of Service Vulnerabilities
References:
References:
- Bugzilla Bug 35 Crash due to fr_packet_cmp (FreeRADIUS)
- Bugzilla Bug 77 radius stops answer after one dhcp-request (FreeRADIUS)
- FreeRADIUS Homepage (FreeRADIUS)
- FreeRADIUS Version 2.1.10 has been released (FreeRADIUS)