CVE-2015-8763

Published: Mar 27, 2017Modified: May 13, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: NVD

Description

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to have unspecified impact via a crafted (1) commit or (2) confirm message, which triggers an out-of-bounds read.

Affected (9)

Products: Freeradius: Freeradius

Freeradius

1 product

Freeradius

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Freeradius Freeradius	Version 3.0.0
Freeradius Freeradius	Version 3.0.1
Freeradius Freeradius	Version 3.0.2
Freeradius Freeradius	Version 3.0.3
Freeradius Freeradius	Version 3.0.4
Freeradius Freeradius	Version 3.0.5
Freeradius Freeradius	Version 3.0.6
Freeradius Freeradius	Version 3.0.7
Freeradius Freeradius	Version 3.0.8