ID de Prueba:	1.3.6.1.4.1.25623.1.0.703930
Categoría:	Debian Local Security Checks
Título:	Debian Security Advisory DSA 3930-1 (freeradius - security update)
Resumen:	Guido Vranken discovered that FreeRADIUS, an open source;implementation of RADIUS, the IETF protocol for AAA (Authorisation,;Authentication, and Accounting), did not properly handle memory when;processing packets. This would allow a remote attacker to cause a;denial-of-service by application crash, or potentially execute;arbitrary code.;;All those issues are covered by this single DSA, but it's worth noting;that not all issues affect all releases:;;CVE-2017-10978 and CVE-2017-10983 affect both jessie and stretch. CVE-2017-10979, CVE-2017-10980, CVE-2017-10981 and CVE-2017-10982 affect only jessie.;CVE-2017-10984, CVE-2017-10985, CVE-2017-10986 and CVE-2017-10987 affect only stretch.
Descripción:	Summary: Guido Vranken discovered that FreeRADIUS, an open source implementation of RADIUS, the IETF protocol for AAA (Authorisation, Authentication, and Accounting), did not properly handle memory when processing packets. This would allow a remote attacker to cause a denial-of-service by application crash, or potentially execute arbitrary code. All those issues are covered by this single DSA, but it's worth noting that not all issues affect all releases: CVE-2017-10978 and CVE-2017-10983 affect both jessie and stretch. CVE-2017-10979, CVE-2017-10980, CVE-2017-10981 and CVE-2017-10982 affect only jessie. CVE-2017-10984, CVE-2017-10985, CVE-2017-10986 and CVE-2017-10987 affect only stretch. Affected Software/OS: freeradius on Debian Linux Solution: For the oldstable distribution (jessie), these problems have been fixed in version 2.2.5+dfsg-0.2+deb8u1. For the stable distribution (stretch), these problems have been fixed in version 3.0.12+dfsg-5+deb9u1. We recommend that you upgrade your freeradius packages. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-10978 Common Vulnerability Exposure (CVE) ID: CVE-2017-10979 Common Vulnerability Exposure (CVE) ID: CVE-2017-10980 Common Vulnerability Exposure (CVE) ID: CVE-2017-10981 Common Vulnerability Exposure (CVE) ID: CVE-2017-10982 Common Vulnerability Exposure (CVE) ID: CVE-2017-10983 Common Vulnerability Exposure (CVE) ID: CVE-2017-10984 Common Vulnerability Exposure (CVE) ID: CVE-2017-10985 Common Vulnerability Exposure (CVE) ID: CVE-2017-10986 Common Vulnerability Exposure (CVE) ID: CVE-2017-10987
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.