PT-2017-7472
CVE-2015-8763
·
Published
2017-03-27
·
Updated
2024-06-15
Description by
CVSS 2.0
6.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
FreeRADIUS versions 3.0 through 3.0.8
Description
The issue in the EAP-PWD module allows remote attackers to have an unspecified impact by sending a crafted commit or confirm message. This triggers an out-of-bounds read.
Recommendations
For FreeRADIUS versions 3.0 through 3.0.8, update to a version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾