← All advisories

High severity7.5NVD Advisory· Published Jul 17, 2017· Updated Jun 17, 2026

CVE-2017-10986

CVE-2017-10986

Description

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

20

FreeRADIUS/Freeradius16 versions
cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*
- (no CPE)range: <3.0.15
osv-coords4 versions
pkg:rpm/opensuse/freeradius-server&distro=openSUSE%20Tumbleweed pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3
< 3.0.23-1.5+ 3 more
- (no CPE)range: < 3.0.23-1.5
- (no CPE)range: < 3.0.15-2.3.1
- (no CPE)range: < 3.0.15-2.3.1
- (no CPE)range: < 3.0.15-2.3.1

Patches

Vulnerability mechanics

References

4

freeradius.org/security/fuzzer-2017.htmlnvdPatchVendor Advisory
www.debian.org/security/2017/dsa-3930nvd
www.securityfocus.com/bid/99971nvd
access.redhat.com/errata/RHSA-2017:2389nvd

News mentions

0

No linked articles in our index yet.