CVE-2015-8762

Published: Mar 27, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

Affected (9)

Products: Freeradius: Freeradius

Freeradius

1 product

Freeradius

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Freeradius Freeradius	Version 3.0.0
Freeradius Freeradius	Version 3.0.1
Freeradius Freeradius	Version 3.0.2
Freeradius Freeradius	Version 3.0.3
Freeradius Freeradius	Version 3.0.4
Freeradius Freeradius	Version 3.0.5
Freeradius Freeradius	Version 3.0.6
Freeradius Freeradius	Version 3.0.7
Freeradius Freeradius	Version 3.0.8