Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-debuginfo | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-krb5 | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-ldap | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-mysql | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-perl | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-postgresql | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-python | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-unixODBC | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::server | freeradius-utils | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-debuginfo | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-krb5 | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-ldap | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-mysql | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-perl | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-postgresql | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-python | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-unixODBC | 0:2.2.6-7.el6_9 |
| Red Hat · RHEL 6 enterprise_linux:6::workstation | freeradius-utils | 0:2.2.6-7.el6_9 |
Vulnerabilities 6
-
Unscored —
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()…
-
Unscored —
An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attac…
-
Unscored —
An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.
-
Unscored —
An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of serv…
-
Unscored —
An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a d…
-
Unscored —
An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding opt…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1468487
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1468490
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1468493
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1468495
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1468498
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1468503
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1759.json
-
report
https://access.redhat.com/security/cve/CVE-2017-10978
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-10978
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-10978
-
article
http://freeradius.org/security/fuzzer-2017.html
-
report
https://access.redhat.com/security/cve/CVE-2017-10979
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-10979
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-10979
-
report
https://access.redhat.com/security/cve/CVE-2017-10980
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-10980
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-10980
-
report
https://access.redhat.com/security/cve/CVE-2017-10981
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-10981
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-10981
-
report
https://access.redhat.com/security/cve/CVE-2017-10982
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-10982
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-10982
-
report
https://access.redhat.com/security/cve/CVE-2017-10983
-
advisory
https://www.cve.org/CVERecord?id=CVE-2017-10983
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-10983