FreeRADIUS 'rlm_pap' Module Denial of Service Vulnerability

Bugtraq ID:	65581
Class:	Unknown
CVE:	CVE-2014-2015
Remote:	Yes
Local:	No
Published:	Feb 17 2014 12:00AM
Updated:	Aug 12 2015 10:11PM
Credit:	Pierre Carrier
Vulnerable:	Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Gentoo Linux FreeRADIUS FreeRADIUS 2.1.7 FreeRADIUS FreeRADIUS 2.1.6 FreeRADIUS FreeRADIUS 2.1.2 FreeRADIUS FreeRADIUS 2.1 FreeRADIUS FreeRADIUS 2.0.4 FreeRADIUS FreeRADIUS 2.2.0 FreeRADIUS FreeRADIUS 2.1.9 FreeRADIUS FreeRADIUS 2.1.8 FreeRADIUS FreeRADIUS 2.1.4 FreeRADIUS FreeRADIUS 2.1.3 FreeRADIUS FreeRADIUS 2.1.12 FreeRADIUS FreeRADIUS 2.1.11 FreeRADIUS FreeRADIUS 2.1.10 FreeRADIUS FreeRADIUS 2.1.1 FreeRADIUS FreeRADIUS 2.0.5 FreeRADIUS FreeRADIUS 2.0.3 FreeRADIUS FreeRADIUS 2.0.2 FreeRADIUS FreeRADIUS 2.0.1
Not Vulnerable:

FreeRADIUS 'rlm_pap' Module Denial of Service Vulnerability

FreeRADIUS is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to crash the application, denying service to legitimate users.

FreeRADIUS 'rlm_pap' Module Denial of Service Vulnerability

References:

• FreeRADIUS Homepage (FreeRADIUS)