« Volver al listado

CVE-2017-10984

Estado: ModificadaCrítica (9.8)—

An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Freeradius — Freeradius

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2017-10984",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 9.8,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-07-17T17:29:00.367",
  "references": [
    {
      "url": "http://freeradius.org/security/fuzzer-2017.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.debian.org/security/2017/dsa-3930",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/99876",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2017:2389",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://freeradius.org/security/fuzzer-2017.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2017/dsa-3930",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/99876",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://access.redhat.com/errata/RHSA-2017:2389",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows \"Write overflow in data2vp_wimax()\" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code."
    },
    {
      "lang": "es",
      "value": "Un problema FR-GV-301 en FreeRADIUS versión 3.x anterior a 3.0.15, permite un \"Write overflow in data2vp_wimax()\" - esto permite a los atacantes remotos causar una denegación de servicio (bloqueo del demonio) o posiblemente ejecutar código arbitrario."
    }
  ],
  "lastModified": "2026-06-17T01:01:02.597",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "388D7673-6BA7-4113-86E1-00F9A60C8796"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B5B5D50-C251-4569-9D2C-49FB64702646"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A693BD6B-BCFF-461B-B71D-4E6F7A614979"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E1D867F-7147-4C97-927B-C10404CC2985"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C30EB50-6BCD-44E4-906A-618ACCF627DC"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8C129A8-59C9-4780-8454-4EB112DF0B40"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "13C228DD-0EB3-4348-8D7A-D17A59E92013"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2400422C-8E52-4946-BE83-AA7167F0F703"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "76048BE7-ABC9-4177-A6A6-03CD267708A3"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00F2F28A-E975-469F-8720-ACAD38230A70"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D0D08EA5-E832-40D7-9530-079C400B050E"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E"
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C50B666B-B423-4182-BD9A-8893B66848AF"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}