{"action":"Upgrade freeradius to 2.1.12+dfsg-1.1 or later.","affected":[{"fixed":"2.1.12+dfsg-1.1","introduced":"0"}],"component":"freeradius","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["2.1.12+dfsg-1.1"],"id":"tcs_01M5NA3JQ8ZMHVMWHGJ2Q45RRA","modified_at":"2026-10-23T17:47:48.579751210Z","published_at":"2012-09-18T17:55:07.850Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2012-3547","https://security-tracker.debian.org/tracker/CVE-2012-3547"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2012-3547#Debian:14/freeradius","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2012-3547"}],"summary":"Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and"}