CVE-2014-2015 in FreeRADIUS
요약 (영어)
Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password hash, as demonstrated by an SSHA hash.
예약하다
2014. 02. 17.
공개
2014. 11. 01.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 12394 | FreeRADIUS RLM-PAP normify 메모리 손상 | 119 | 입증되지 않음 | 공식 수정 | CVE-2014-2015 |