NVD

Id
30523  
Name
CVE-2014-2015  
Description
Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-01  
Modified Date
2016-11-28  
Seq
2014-2015  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
161370 30523 CVE-2014-2015 [freebsd-bugbusters] 20140212 freeradius denial of service in authentication flow  View
161371 30523 CVE-2014-2015 [freebsd-bugbusters] 20140213 freeradius denial of service in authentication flow  View
161372 30523 CVE-2014-2015 [freebsd-bugbusters] 20140214 freeradius denial of service in authentication flow  View
161373 30523 CVE-2014-2015 USN-2122-1  View
161374 30523 CVE-2014-2015 [oss-security] 20140216 Re: CVE request: freeradius denial of service in rlm_pap hash processing  View
161375 30523 CVE-2014-2015 65581  View
161376 30523 CVE-2014-2015 https://bugzilla.redhat.com/show_bug.cgi?id=1066761  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16319 JVNDB-2014-005194 FreeRADIUS の rlm_pap モジュールの normify 関数におけるスタックベースのバッファオーバーフローの脆弱性 FreeRADIUS の rlm_pap モジュール (modules/rlm_pap/rlm_pap.c) の normify 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2014-2015 69302 CVE-2014-2015 30523 7.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005194.html 2014-02-18 2014-11-05 View