CVE-2004-0960
Fixed in a distro release EPSS 3%
FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.
Products: freeradius, redhat enterprise_linux, redhat fedora_core
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | freeradius | 1.0.1 |
| Debian 13 | freeradius | 1.0.1 |
| Debian 14 | freeradius | 1.0.1 |
| Red Hat Enterprise Linux 3 | freeradius | 0:1.0.1-1.RHEL3 |
| Red Hat Enterprise Linux 3 | freeradius-debuginfo | 0:1.0.1-1.RHEL3 |