CVE-2003-0967
MEDIUM 5.0EPSS 4.8%
rad_decode in FreeRADIUS 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a short RADIUS string attribute with a tag, which causes memcpy to be called with a -1 length argument, as demonstrated using the Tunnel-Password attribute.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P - EPSS
- 4.75% chance of exploitation in the next 30 days, 92nd percentile
- Published
- 2003-12-02
- Updated
- 2024-08-08