Errata overview
Errata ID 275
Date 2018-01-31
Source package freeradius
Fixed in version 2.2.5+dfsg-0.2+deb8u1A~4.2.3.201801211553
Description
This update addresses the following issues:
* FR-GV-205 issue allows "DHCP - Buffer over-read in
  fr_dhcp_decode_options()" and a denial of service. (CVE-2017-10982)
* FR-GV-206 issue allows "DHCP - Read overflow when decoding option 63" and a
  denial of service. (CVE-2017-10983)
* FR-GV-203 issue allows "DHCP - Memory leak in decode_tlv()" and a denial of
  service. (CVE-2017-10980)
* FR-GV-202 issue allows "Write overflow in rad_coalesce()" - this allows
  remote attackers to cause a denial of service (daemon crash) or possibly
  execute arbitrary code. (CVE-2017-10979)
* FR-GV-204 issue allows "DHCP - Memory leak in fr_dhcp_decode()" and a
  denial of service. (CVE-2017-10981)
* FR-GV-201 issue allows "Read / write overflow in make_secret()" and a
  denial of service. (CVE-2017-10978)
Additional notes
CVE ID CVE-2017-10982
CVE-2017-10983
CVE-2017-10980
CVE-2017-10979
CVE-2017-10981
CVE-2017-10978
UCS Bug number #45232