NVD

Id
15053  
Name
CVE-2010-3696  
Description
The fr_dhcp_decode function in lib/dhcp.c in FreeRADIUS 2.1.9, in certain non-default builds, does not properly handle the DHCP Relay Agent Information option, which allows remote attackers to cause a denial of service (infinite loop and daemon outage) via a packet that has more than one sub-option. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-10-07  
Modified Date
2010-10-08  
Seq
2010-3696  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84121 15053 CVE-2010-3696 http://freeradius.org/press/index.html#2.1.10  View
84122 15053 CVE-2010-3696 http://github.com/alandekok/freeradius-server/commit/4dc7800b866f889a1247685bbaa6dd4238a56279  View
84123 15053 CVE-2010-3696 [oss-security] 20101001 CVE request: freeradius  View
84124 15053 CVE-2010-3696 [oss-security] 20101001 Re: CVE request: freeradius  View
84125 15053 CVE-2010-3696 https://bugs.freeradius.org/bugzilla/show_bug.cgi?id=77  View
84126 15053 CVE-2010-3696 https://bugzilla.redhat.com/show_bug.cgi?id=639390  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37420 JVNDB-2010-003205 FreeRADIUS の fr_dhcp_decode 関数におけるサービス運用妨害 (DoS) の脆弱性 FreeRADIUS の lib/dhcp.c の fr_dhcp_decode 関数は、DHCP Relay Agent Information オプションを適切に処理しないため、サービス運用妨害 (無限ループおよびデーモン停止) 状態となる脆弱性が存在します。 CVE-2010-3696 46276 CVE-2010-3696 15053 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003205.html 2010-09-28 2012-03-27 View