CVE-2017-10980

An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
freeradiusfreeradius
2.0.0
freeradiusfreeradius
2.0.0:pre1
freeradiusfreeradius
2.0.0:pre2
freeradiusfreeradius
2.0.1
freeradiusfreeradius
2.0.2
freeradiusfreeradius
2.0.3
freeradiusfreeradius
2.0.4
freeradiusfreeradius
2.0.5
freeradiusfreeradius
2.1.0
freeradiusfreeradius
2.1.1
freeradiusfreeradius
2.1.2
freeradiusfreeradius
2.1.3
freeradiusfreeradius
2.1.4
freeradiusfreeradius
2.1.6
freeradiusfreeradius
2.1.7
freeradiusfreeradius
2.1.8
freeradiusfreeradius
2.1.9
freeradiusfreeradius
2.1.10
freeradiusfreeradius
2.1.11
freeradiusfreeradius
2.1.12
freeradiusfreeradius
2.2.0
freeradiusfreeradius
2.2.1
freeradiusfreeradius
2.2.2
freeradiusfreeradius
2.2.3
freeradiusfreeradius
2.2.4
freeradiusfreeradius
2.2.5
freeradiusfreeradius
2.2.6
freeradiusfreeradius
2.2.7
freeradiusfreeradius
2.2.8
freeradiusfreeradius
2.2.9
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freeradius
bookworm
3.2.1+dfsg-4+deb12u1
fixed
bullseye
3.0.21+dfsg-2.2+deb11u1
fixed
sid
3.2.5+dfsg-3
fixed
trixie
3.2.5+dfsg-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freeradius
trusty
Fixed 2.1.12+dfsg-1.2ubuntu8.2
released
xenial
Fixed 2.2.8+dfsg-0.1ubuntu0.1
released
yakkety
ignored
zesty
not-affected