CVE-2015-8762

MEDIUM

Freeradius - NULL Pointer Dereference

Title source: rule

Description

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

References (2)

[Not Applicable] http://freeradius.org/security.html#eap-pwd-2015

[Mailing List, Patch, Third Party Advisory] http://www.openwall.com/lists/oss-security/2016/01/08/7

Scores

CVSS v3 5.9

EPSS 0.0050

EPSS Percentile 65.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-476

Status published

Affected Products (10)

freeradius/freeradius

n/a/n/a

Timeline

Published Mar 27, 2017

Tracked Since Feb 18, 2026