Debian/freeradius: unknown
The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module
Action: Upgrade freeradius to 2.0.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.0-1 | - |
Fixed versions
| 2.0.0-1 |
Sources
published · modified · JSON