Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long "not after" timestamp in a client certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
FreeRADIUS 多个基于栈的缓冲区溢出漏洞
Vulnerability Description
FreeRadius是FreeRADIUS Server项目的一套实现了RADIUS协议的软件。该软件主要用于账户认证管理、记账管理和上网账户管理等，并包含有一个Radius服务器、一个BSD协议授权的客户端库、一个PAM库和一个Apache模块。 FreeRADIUS 2.1.10至2.1.12版本中的cbtls_verify函数中存在多个基于栈的缓冲区溢出漏洞，该漏洞源于对用户提供的数据未执行充分的边界值校验。攻击者可利用这些漏洞在受影响应用程序上下文中执行任意代码，成功的利用将操控应用程序和底层计算
CVSS Information
N/A
Vulnerability Type
N/A