VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 15, 2003· Updated Jun 16, 2026

CVE-2003-0967

CVE-2003-0967

Description

rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • FreeRADIUS/Freeradius2 versions
    cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*range: <=0.9.2
    • (no CPE)range: <=0.9.2

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.