Skip to content
OpenAdvisories
Unscored RHSA-2017:2389 6 CVEs

Red Hat Security Advisory: freeradius security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 26

ReleasePackageFixed in
Red Hat · RHEL 7 enterprise_linux:7::server freeradius 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-debuginfo 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-devel 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-doc 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-krb5 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-ldap 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-mysql 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-perl 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-postgresql 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-python 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-sqlite 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-unixODBC 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::server freeradius-utils 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-debuginfo 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-devel 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-doc 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-krb5 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-ldap 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-mysql 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-perl 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-postgresql 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-python 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-sqlite 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-unixODBC 0:3.0.13-8.el7_4
Red Hat · RHEL 7 enterprise_linux:7::workstation freeradius-utils 0:3.0.13-8.el7_4

Vulnerabilities 6

  • Unscored —
    CVE-2017-10978

    An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()…

    freeradius freeradius Debian Ubuntu
  • Unscored —
    CVE-2017-10983

    An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding opt…

    freeradius freeradius Debian Ubuntu
  • Unscored —
    CVE-2017-10984

    An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote atta…

    freeradius Debian
  • Unscored —
    CVE-2017-10985

    An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes…

    freeradius Debian
  • Unscored —
    CVE-2017-10986

    An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of serv…

    freeradius Debian
  • Unscored —
    CVE-2017-10987

    An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and …

    freeradius Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1468487
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1468503
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1468549
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1468550
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1468551
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1468552
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2389.json
  • report
    https://access.redhat.com/security/cve/CVE-2017-10978
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-10978
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-10978
  • article
    http://freeradius.org/security/fuzzer-2017.html
  • report
    https://access.redhat.com/security/cve/CVE-2017-10983
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-10983
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-10983
  • report
    https://access.redhat.com/security/cve/CVE-2017-10984
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-10984
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-10984
  • report
    https://access.redhat.com/security/cve/CVE-2017-10985
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-10985
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-10985
  • report
    https://access.redhat.com/security/cve/CVE-2017-10986
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-10986
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-10986
  • report
    https://access.redhat.com/security/cve/CVE-2017-10987
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2017-10987
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2017-10987