Skip to content
OpenAdvisories
High ELSA-2017-2389 6 CVEs

Important: freeradius security update (Oracle Linux 7)

Published Aug 9, 2017 · Updated Aug 9, 2017

Ecosystem: Oracle Linux

Summary

[3.0.13-8]
- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
data2vp_wimax()

[3.0.13-7]
- Resolves: Bug#1469409 CVE-2017-10978 freeradius: Out-of-bounds read/write due
to improper output buffer size check in make_secret()
- Resolves: Bug#1469413 CVE-2017-10983 freeradius: Out-of-bounds read in
fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469414 CVE-2017-10984 freeradius: Out-of-bounds write in
data2vp_wimax()
- Resolves: Bug#1469417 CVE-2017-10985 freeradius: Infinite loop and memory
exhaustion with 'concat' attributes
- Resolves: Bug#1469418 CVE-2017-10986 freeradius: Infinite read in
dhcp_attr2vp()
- Resolves: Bug#1469421 CVE-2017-10987 freeradius: Buffer over-read in
fr_dhcp_decode_suboptions()

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 freeradius 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-devel 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-doc 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-krb5 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-ldap 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-mysql 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-perl 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-postgresql 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-python 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-sqlite 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-unixODBC 0:3.0.13-8.el7_4
Oracle Linux · 7 freeradius-utils 0:3.0.13-8.el7_4

Vulnerabilities 6

  • Unscored —
    CVE-2017-10978

    An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()…

    freeradius freeradius Debian Ubuntu
  • Unscored —
    CVE-2017-10983

    An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding opt…

    freeradius freeradius Debian Ubuntu
  • Unscored —
    CVE-2017-10984

    An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote atta…

    freeradius Debian
  • Unscored —
    CVE-2017-10985

    An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes…

    freeradius Debian
  • Unscored —
    CVE-2017-10986

    An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of serv…

    freeradius Debian
  • Unscored —
    CVE-2017-10987

    An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and …

    freeradius Debian