Unscored CVE-2004-0849 EUVD-2004-0847GHSA-grgc-7f74-qq6p

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled w…

Published Sep 17, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

References

[Info-gnu-radius] 20040915 GNU Radius 1.2.94. mailing-list
radius-asndecodestring-bo(17391) vdb-entry
20040915 GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability third-party-advisory