Denial of Service Vulnerability in FreeRADIUS EAP-PWD Module

Denial of Service Vulnerability in FreeRADIUS EAP-PWD Module

CVE-2015-8762 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

The EAP-PWD module in FreeRADIUS 3.0 through 3.0.8 allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a zero-length EAP-PWD packet.

Learn more about our Cis Benchmark Audit For Server Software.