CVE-2017-10984

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-10984
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10984.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-10984
Downstream
Related
Published
2017-07-17T17:29:00.367Z
Modified
2026-04-11T15:15:08.594417Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.

References

Affected packages

Git / github.com/freeradius/freeradius-server

Affected ranges

Type
GIT
Repo
https://github.com/freeradius/freeradius-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
580424ea12feeb5933f1aaac33fd5f9e2fa2ee60
Last affected
9dbdad73ca823f5d2fbb0cbc5c34aec714a9e0d3
Last affected
808a9b3a8ff7ebac794519a1e842507c9a99107b
Last affected
3366cf0a98513ee15e1b96e3996f929ba5e611a4
Last affected
7c9d5fbe83a67934bff42c1093d50daacbf1c083
Last affected
8bc2d13ba84de80ef4873b0d0990a133332d24a1
Last affected
add9d9595bdbbae2c6b045cc3f8c1f31823748ec
Last affected
8282a158b0b30d7dc522162855a30c942ad57dfa
Last affected
3250f1d08a5ce770afb88760cdebdfeac5bf495c
Last affected
8a1cbd0d3a2fca26aefac2cfe7a50cd5d22fed42
Last affected
d33a1dcd2591773fd3d0adde592dfad73c2088ed
Last affected
d667a281f56c959b77f53b7cf003c4acc634e4b0
Last affected
86b280f53d5cad01130a3245adb82cda6adb93ef
Last affected
d5a382ecdadaa022a917b91f1ea96e73ef189150
Last affected
a6ce2fc6c7c21d232175f535d3128349bcd2d784
Database specific 
{
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "3.0.0"
        },
        {
            "last_affected": "3.0.1"
        },
        {
            "last_affected": "3.0.2"
        },
        {
            "last_affected": "3.0.3"
        },
        {
            "last_affected": "3.0.4"
        },
        {
            "last_affected": "3.0.5"
        },
        {
            "last_affected": "3.0.6"
        },
        {
            "last_affected": "3.0.7"
        },
        {
            "last_affected": "3.0.8"
        },
        {
            "last_affected": "3.0.9"
        },
        {
            "last_affected": "3.0.10"
        },
        {
            "last_affected": "3.0.11"
        },
        {
            "last_affected": "3.0.12"
        },
        {
            "last_affected": "3.0.13"
        },
        {
            "last_affected": "3.0.14"
        }
    ],
    "cpe": [
        "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*"
    ]
}

Affected versions

Other
branch_4_0_0
first-build
release_0_1_0
release_0_2_0
release_0_3_0
release_0_4_0
release_0_5_0
release_0_6_0
release_0_7_0
release_2_0_0
release_2_0_0_pre1
release_2_0_0_pre2
release_2_0_1
release_2_0_2
release_2_0_3
release_2_0_4
release_2_0_5
release_2_1_0
release_2_1_1
release_2_1_2
release_2_1_3
release_2_1_4
release_2_1_7
release_3_0_0
release_3_0_0_beta0
release_3_0_0_beta1
release_3_0_0_rc0
release_3_0_0_rc1
release_3_0_1
release_3_0_10
release_3_0_11
release_3_0_12
release_3_0_13
release_3_0_14
release_3_0_2
release_3_0_3
release_3_0_4
release_3_0_4_rc0
release_3_0_4_rc1
release_3_0_4_rc2
release_3_0_5
release_3_0_6
release_3_0_7
release_3_0_8
release_3_0_9
release_3.*
release_3.0.8

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-10984.json"