Bug 1468555 (CVE-2017-10988) - CVE-2017-10988 freeradius: Incorrectly created 'signed' attributes
Summary: CVE-2017-10988 freeradius: Incorrectly created 'signed' attributes
Keywords:
Status: CLOSED NOTABUG
Alias: CVE-2017-10988
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1471884
Blocks: 1468570
TreeView+ depends on / blocked
 
Reported: 2017-07-07 12:01 UTC by Adam Mariš
Modified: 2021-02-17 01:58 UTC (History)
7 users (show)

Fixed In Version: freeradius 3.0.15
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-07-10 12:27:16 UTC
Embargoed:

Attachments (Terms of Use)
Proposed patch (1.57 KB, patch)
2017-07-07 12:03 UTC, Adam Mariš 		no flags Details | Diff
View All

Description Adam Mariš 2017-07-07 12:01:09 UTC 
Attributes of data type 'signed' would sometimes be created from uninitialized memory, instead of from the received packet. There is only one 'signed' attribute, which is in the WiMAX dictionaries, and it is used only in certain limited situations.

The security impact is minimal.

Affected versions: 3.0.0 through 3.0.14, inclusive.
Comment 1 Adam Mariš 2017-07-07 12:01:15 UTC 
Acknowledgments:

Name: the FreeRADIUS project
Upstream: Guido Vranken
Comment 2 Adam Mariš 2017-07-07 12:03:03 UTC 
Created attachment 1295266 [details]
Proposed patch
Comment 4 Dhiru Kholia 2017-07-17 15:04:21 UTC 
Created freeradius tracking bugs for this issue:

Affects: fedora-all [bug 1471884]
Comment 6 Tomas Hoger 2017-07-18 07:42:50 UTC 
This CVE was rejected:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10988

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Comment 7 Dhiru Kholia 2017-08-02 09:42:52 UTC 
External References:

http://freeradius.org/security/fuzzer-2017.html
Note You need to log in before you can comment on or make changes to this bug.