A security issue has been found in freeradius <= 2.2.9, where the fr_dhcp_decode() function leaked memory in certain circumstances. A remote attacker with the ability of sending DHCP packets which are accepted by the server can cause a memory leak, leading to denial of service.
A security issue has been found in freeradius <= 2.2.9, where the fr_dhcp_decode() function leaked memory in certain circumstances. A remote attacker with the ability of sending DHCP packets which are accepted by the server can cause a memory leak, leading to denial of service.
http://freeradius.org/security/fuzzer-2017.html#FR-GV-204 https://github.com/FreeRADIUS/freeradius-server/commit/812766e2150faa07b4c574e51393b014feaffe6c
Vulmon