The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Freeradius | Freeradius | 3.0.5 | 3.0.5 |
Freeradius | Freeradius | 3.0.8 | 3.0.8 |
Freeradius | Freeradius | 3.0.1 | 3.0.1 |
Freeradius | Freeradius | 3.0.3 | 3.0.3 |
Freeradius | Freeradius | 3.0.6 | 3.0.6 |
Freeradius | Freeradius | 3.0.0 | 3.0.0 |
Freeradius | Freeradius | 3.0.4 | 3.0.4 |
Freeradius | Freeradius | 3.0.2 | 3.0.2 |
Freeradius | Freeradius | 3.0.7 | 3.0.7 |