Unscored CVE-2015-8764 EUVD-2015-8637GHSA-3rpp-wj27-m2p9

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.

Published Mar 27, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Off-by-one error in the EAP-PWD module in FreeRADIUS 3.0 through 3.0.8, which triggers a buffer overflow.

References

http://freeradius.org/security.html#eap-pwd-2015
[oss-security] 20160108 Re: CVE Request: freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer mailing-list