CVE-2017-10979

Published: Jul 17, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.

Affected (30)

Products: Freeradius: Freeradius

Freeradius

1 product

Freeradius

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Freeradius Freeradius	Version 2.0.0
Freeradius Freeradius	Version 2.0.0 pre1
Freeradius Freeradius	Version 2.0.0 pre2
Freeradius Freeradius	Version 2.0.1
Freeradius Freeradius	Version 2.0.2
Freeradius Freeradius	Version 2.0.3
Freeradius Freeradius	Version 2.0.4
Freeradius Freeradius	Version 2.0.5
Freeradius Freeradius	Version 2.1.0
Freeradius Freeradius	Version 2.1.10
Freeradius Freeradius	Version 2.1.11
Freeradius Freeradius	Version 2.1.12
Freeradius Freeradius	Version 2.1.1
Freeradius Freeradius	Version 2.1.2
Freeradius Freeradius	Version 2.1.3
Freeradius Freeradius	Version 2.1.4
Freeradius Freeradius	Version 2.1.6
Freeradius Freeradius	Version 2.1.7
Freeradius Freeradius	Version 2.1.8
Freeradius Freeradius	Version 2.1.9
Freeradius Freeradius	Version 2.2.0
Freeradius Freeradius	Version 2.2.1
Freeradius Freeradius	Version 2.2.2
Freeradius Freeradius	Version 2.2.3
Freeradius Freeradius	Version 2.2.4
Freeradius Freeradius	Version 2.2.5
Freeradius Freeradius	Version 2.2.6
Freeradius Freeradius	Version 2.2.7
Freeradius Freeradius	Version 2.2.8
Freeradius Freeradius	Version 2.2.9