CVE-2009-3111
NoneCVSS
—
EPSS
11.2%
Published
Sep 9, 2009
CISA due date
—
The record
The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash) via zero-length Tunnel-Password attributes, as demonstrated by a certain module in VulnDisco Pack Professional 7.6 through 8.11. NOTE: this is a regression error related to CVE-2003-0967.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | freeradius | 0 | 2.0.0-1 |
| Debian:11 | freeradius | 0 | 2.0.0-1 |
| Debian:12 | freeradius | 0 | 2.0.0-1 |
| Debian:13 | freeradius | 0 | 2.0.0-1 |
| Red Hat:enterprise_linux:5::client_workstation | freeradius | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::client_workstation | freeradius-debuginfo | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::client_workstation | freeradius-mysql | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::client_workstation | freeradius-postgresql | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::client_workstation | freeradius-unixODBC | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::server | freeradius | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::server | freeradius-debuginfo | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::server | freeradius-mysql | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::server | freeradius-postgresql | 0 | 0:1.1.3-1.5.el5_4 |
| Red Hat:enterprise_linux:5::server | freeradius-unixODBC | 0 | 0:1.1.3-1.5.el5_4 |