CVE-2007-2028

Impact:
Moderate
Public Date:
2007-04-12
Bugzilla:
1618307: CVE-2007-2028 security flaw

The MITRE CVE dictionary describes this issue as:

Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which causes the authentication request to be rejected but does not reclaim VALUE_PAIR data structures.

Find out more about CVE-2007-2028 from the MITRE CVE dictionary dictionary and NIST NVD.

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 5 (freeradius) RHSA-2007:0338 2007-05-10
Red Hat Enterprise Linux 3 (freeradius) RHSA-2007:0338 2007-05-10
Red Hat Enterprise Linux 4 (freeradius) RHSA-2007:0338 2007-05-10

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.