FreeRADIUS CVE-2017-10979 Out-Of-Bounds Write Remote Code Execution Vulnerability
BID:99901
Info
FreeRADIUS CVE-2017-10979 Out-Of-Bounds Write Remote Code Execution Vulnerability
| Bugtraq ID: | 99901 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-10979 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 18 2017 12:00AM |
| Updated: | Jul 31 2017 10:08AM |
| Credit: | Guido Vranken |
| Vulnerable: |
Ubuntu Ubuntu Linux 17.04 Ubuntu Ubuntu Linux 16.04 LTS Ubuntu Ubuntu Linux 14.04 LTS Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux for Power 6 Redhat Enterprise Linux for IBM z Systems 6 Redhat Enterprise Linux 5 FreeRADIUS FreeRADIUS 2.1.7 FreeRADIUS FreeRADIUS 2.1.6 FreeRADIUS FreeRADIUS 2.1.2 FreeRADIUS FreeRADIUS 2.1 FreeRADIUS FreeRADIUS 2.0.4 FreeRADIUS FreeRADIUS 2.0 FreeRADIUS FreeRADIUS 2.2.9 FreeRADIUS FreeRADIUS 2.2.8 FreeRADIUS FreeRADIUS 2.2.7 FreeRADIUS FreeRADIUS 2.2.0 FreeRADIUS FreeRADIUS 2.1.9 FreeRADIUS FreeRADIUS 2.1.8 FreeRADIUS FreeRADIUS 2.1.4 FreeRADIUS FreeRADIUS 2.1.3 FreeRADIUS FreeRADIUS 2.1.12 FreeRADIUS FreeRADIUS 2.1.11 FreeRADIUS FreeRADIUS 2.1.10 FreeRADIUS FreeRADIUS 2.1.1 FreeRADIUS FreeRADIUS 2.0.5 FreeRADIUS FreeRADIUS 2.0.3 FreeRADIUS FreeRADIUS 2.0.2 FreeRADIUS FreeRADIUS 2.0.1 |
| Not Vulnerable: |
FreeRADIUS FreeRADIUS 2.2.10 |
Discussion
FreeRADIUS CVE-2017-10979 Out-Of-Bounds Write Remote Code Execution Vulnerability
FreeRADIUS is prone to an remote code-execution vulnerability.
An attacker could exploit this issue to crash the server or to execute arbitrary code within the context of the server process.
FreeRADIUS 2.0.0 through 2.2.9 are vulnerable.
FreeRADIUS is prone to an remote code-execution vulnerability.
An attacker could exploit this issue to crash the server or to execute arbitrary code within the context of the server process.
FreeRADIUS 2.0.0 through 2.2.9 are vulnerable.
Exploit / POC
FreeRADIUS CVE-2017-10979 Out-Of-Bounds Write Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
FreeRADIUS CVE-2017-10979 Out-Of-Bounds Write Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
FreeRADIUS CVE-2017-10979 Out-Of-Bounds Write Remote Code Execution Vulnerability
References:
References:
- FreeRADIUS Homepage (FreeRADIUS)
- Bug 1468490 CVE-2017-10979 freeradius: Out-of-bounds write in rad_coalesce() (Redhat)
- CVE-2017-10979 (Redhat)
- RHSA-2017:1759 - Security Advisory (Redhat)