freeradius.orgConfirmation
http://freeradius.org/security/fuzzer-2017.html CVE-2017-10986
HIGH
freeradius freeradius Loop with Unreachable Exit Condition ('Infinite Loop')
Record summary
CVE-2017-10986 has a selected CVSS score of 7.5 (high).
Description
An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Oct 20, 2025 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
freeradiusBrowse freeradius / freeradius | VulnCheck | Version data not supplied | |
References
5DSA-3930Vendor advisory
http://www.debian.org/security/2017/dsa-3930 99971vdb entry
http://www.securityfocus.com/bid/99971 RHSA-2017:2389Vendor advisory
https://access.redhat.com/errata/RHSA-2017:2389 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2017-10986