suse · CVE-2017-10986

Quick triage

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-10986 severity moderate: SUSE including 152 source package names (freeradius-3.0.13-8.el7_4, freeradius-devel-3.0.13-8.el7_4, …), 196 product×package rows across 18 product lines (SUSE Liberty Linux 7, SUSE Linux Enterprise High Performance Computing 12 SP5, … (18 product lines)): Fixed 172, Known Not Affected 24.

Description:

An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.