CVE-2017-10978
Fixed in a distro release EPSS 4%
An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.
Products: freeradius, debian_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_eus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | freeradius | 3.0.15-1 |
| Debian 12 | freeradius | 3.0.15+dfsg-1 |
| Debian 13 | freeradius | 3.0.15+dfsg-1 |
| Debian 14 | freeradius | 3.0.15+dfsg-1 |
| Debian 7 | freeradius | 2.1.12+dfsg-1.2+deb7u2 |
| Debian 8 | freeradius | 2.2.5+dfsg-0.2+deb8u1 |
| Debian 9 | freeradius | 3.0.12+dfsg-5+deb9u1 |
| Red Hat Enterprise Linux 6 | freeradius | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-debuginfo | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-krb5 | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-ldap | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-mysql | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-perl | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-postgresql | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-python | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-unixODBC | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 6 | freeradius-utils | 0:2.2.6-7.el6_9 |
| Red Hat Enterprise Linux 7 | freeradius | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-debuginfo | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-devel | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-doc | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-krb5 | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-ldap | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-mysql | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-perl | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-postgresql | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-python | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-sqlite | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-unixODBC | 0:3.0.13-8.el7_4 |
| Red Hat Enterprise Linux 7 | freeradius-utils | 0:3.0.13-8.el7_4 |
| SUSE Linux Enterprise Server 11 SP4 | freeradius-server | 2.1.1-7.25.3.1 |
| SUSE Linux Enterprise Server 12 SP2 | freeradius-server | 3.0.3-17.9.1 |
| SUSE Linux Enterprise Server 12 SP3 | freeradius-server | 3.0.15-2.3.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | freeradius-server | 3.0.3-17.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | freeradius-server | 2.1.1-7.25.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | freeradius-server | 3.0.3-17.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | freeradius-server | 3.0.15-2.3.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | freeradius-server | 2.1.1-7.25.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | freeradius-server | 3.0.3-17.9.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | freeradius-server | 3.0.15-2.3.1 |
| Ubuntu 14.04 LTS | freeradius | 2.1.12+dfsg-1.2ubuntu8.2 |
| Ubuntu 16.04 LTS | freeradius | 2.2.8+dfsg-0.1ubuntu0.1 |
| openSUSE Tumbleweed | freeradius-server | 3.0.23-1.5 |