CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0967

rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.044

EPSS Ranking 88.4%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2003-0967

Freeradius » Freeradius » Version: N/A

cpe:2.3:a:freeradius:freeradius:-
Freeradius » Freeradius » Version: 0.1

cpe:2.3:a:freeradius:freeradius:0.1
Freeradius » Freeradius » Version: 0.2

cpe:2.3:a:freeradius:freeradius:0.2
Freeradius » Freeradius » Version: 0.3

cpe:2.3:a:freeradius:freeradius:0.3
Freeradius » Freeradius » Version: 0.4

cpe:2.3:a:freeradius:freeradius:0.4
Freeradius » Freeradius » Version: 0.5

cpe:2.3:a:freeradius:freeradius:0.5
Freeradius » Freeradius » Version: 0.6

cpe:2.3:a:freeradius:freeradius:0.6
Freeradius » Freeradius » Version: 0.7

cpe:2.3:a:freeradius:freeradius:0.7
Freeradius » Freeradius » Version: 0.7.1

cpe:2.3:a:freeradius:freeradius:0.7.1
Freeradius » Freeradius » Version: 0.8

cpe:2.3:a:freeradius:freeradius:0.8
Freeradius » Freeradius » Version: 0.8.1

cpe:2.3:a:freeradius:freeradius:0.8.1
Freeradius » Freeradius » Version: 0.9.0

cpe:2.3:a:freeradius:freeradius:0.9.0
Freeradius » Freeradius » Version: 0.9.1

cpe:2.3:a:freeradius:freeradius:0.9.1
Freeradius » Freeradius » Version: 0.9.2

cpe:2.3:a:freeradius:freeradius:0.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0967

Products

Pricing

Contact Us