CVE-2021-29629

Published: May 28, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE before p7, and 11.4-RELEASE before p10, missing message validation in libradius(3) could allow malicious clients or servers to trigger denial of service in vulnerable servers or clients respectively.

Affected (26)

Products: Freebsd: Freebsd

Freebsd

1 product

Freebsd

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Freebsd Freebsd	Version 11.4
Freebsd Freebsd	Version 11.4 beta1
Freebsd Freebsd	Version 11.4 p1
Freebsd Freebsd	Version 11.4 p2
Freebsd Freebsd	Version 11.4 p3
Freebsd Freebsd	Version 11.4 p4
Freebsd Freebsd	Version 11.4 p5
Freebsd Freebsd	Version 11.4 p6
Freebsd Freebsd	Version 11.4 p7
Freebsd Freebsd	Version 11.4 p8
Freebsd Freebsd	Version 11.4 p9
Freebsd Freebsd	Version 11.4 rc1
Freebsd Freebsd	Version 11.4 rc2
Freebsd Freebsd	Version 12.2
Freebsd Freebsd	Version 12.2 beta1-p1
Freebsd Freebsd	Version 12.2 p1
Freebsd Freebsd	Version 12.2 p2
Freebsd Freebsd	Version 12.2 p3
Freebsd Freebsd	Version 12.2 p4
Freebsd Freebsd	Version 12.2 p5
Freebsd Freebsd	Version 12.2 p6
Freebsd Freebsd	Version 13.0
Freebsd Freebsd	Version 13.0 beta3-p1
Freebsd Freebsd	Version 13.0 rc3
Freebsd Freebsd	Version 13.0 rc4
Freebsd Freebsd	Version 13.0 rc5-p1