{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "90C5B6A9-0E46-438C-9EBB-63529AAD1B1D",
                     versionEndExcluding: "3.0.19",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "20294CE7-12C8-43CA-A702-5ED2A3044FFC",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "142AD0DD-4CF3-4D74-9442-459CE3347E3A",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
                     matchCriteriaId: "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "07C312A0-CD2C-4B9C-B064-6409B25C278F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",
                     matchCriteriaId: "CD783B0C-9246-47D9-A937-6144FE8BFF0F",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9497.",
      },
      {
         lang: "es",
         value: "FreeRADIUS antes de 3.0.19 no impide el uso de la reflexión para la autenticación de spoofing, también conocido como \"Dragonblood\", un problema similar al CVE-2019-9497.",
      },
   ],
   id: "CVE-2019-11234",
   lastModified: "2024-11-21T04:20:46.950",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 7.5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV30: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 9.8,
               baseSeverity: "CRITICAL",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
               version: "3.0",
            },
            exploitabilityScore: 3.9,
            impactScore: 5.9,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2019-04-22T11:29:03.330",
   references: [
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html",
      },
      {
         source: "cve@mitre.org",
         url: "https://access.redhat.com/errata/RHSA-2019:1131",
      },
      {
         source: "cve@mitre.org",
         url: "https://access.redhat.com/errata/RHSA-2019:1142",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Issue Tracking",
            "Third Party Advisory",
         ],
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=1695783",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Release Notes",
            "Vendor Advisory",
         ],
         url: "https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://freeradius.org/security/",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Technical Description",
            "Third Party Advisory",
         ],
         url: "https://papers.mathyvanhoef.com/dragonblood.pdf",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://usn.ubuntu.com/3954-1/",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Not Applicable",
            "Third Party Advisory",
            "US Government Resource",
         ],
         url: "https://www.kb.cert.org/vuls/id/871675/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://access.redhat.com/errata/RHSA-2019:1131",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://access.redhat.com/errata/RHSA-2019:1142",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Issue Tracking",
            "Third Party Advisory",
         ],
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=1695783",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Release Notes",
            "Vendor Advisory",
         ],
         url: "https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "https://freeradius.org/security/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Technical Description",
            "Third Party Advisory",
         ],
         url: "https://papers.mathyvanhoef.com/dragonblood.pdf",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "https://usn.ubuntu.com/3954-1/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Not Applicable",
            "Third Party Advisory",
            "US Government Resource",
         ],
         url: "https://www.kb.cert.org/vuls/id/871675/",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-287",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "C593C44B-CB2B-4C38-A44D-BA1BC9BF3CDB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "908DA549-0EE5-4B85-961F-1C67210F6AED",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "91FBBBC1-7106-4DA1-BBCF-9D776BB082ED",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via a long \"not after\" timestamp in a client certificate.",
      },
      {
         lang: "es",
         value: "Desbordamiento de búfer basado en pila en la función cbtls_verify en FreeRADIUS v2.1.10 hasta la v2.1.12, cuando se usan los métodos TLS-based EAP, permite a atacantes remotos provocar una denegación de servicio (caída del servidor) y posiblemente ejecutar código a través de un sellado de tiempo \"not after\" largo, en un certificado de un cliente.",
      },
   ],
   id: "CVE-2012-3547",
   lastModified: "2025-04-11T00:51:21.963",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "MEDIUM",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 6.8,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:M/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 8.6,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2012-09-18T17:55:07.850",
   references: [
      {
         source: "secalert@redhat.com",
         url: "http://archives.neohapsis.com/archives/bugtraq/2012-09/0043.html",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090171.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00023.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://osvdb.org/85325",
      },
      {
         source: "secalert@redhat.com",
         url: "http://rhn.redhat.com/errata/RHSA-2012-1326.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://rhn.redhat.com/errata/RHSA-2012-1327.html",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/50484",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/50584",
      },
      {
         source: "secalert@redhat.com",
         url: "http://secunia.com/advisories/50637",
      },
      {
         source: "secalert@redhat.com",
         url: "http://secunia.com/advisories/50770",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.debian.org/security/2012/dsa-2546",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2012:159",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.openwall.com/lists/oss-security/2012/09/10/2",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.pre-cert.de/advisories/PRE-SA-2012-06.txt",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.securityfocus.com/bid/55483",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.securitytracker.com/id?1027509",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.ubuntu.com/usn/USN-1585-1",
      },
      {
         source: "secalert@redhat.com",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/78408",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://archives.neohapsis.com/archives/bugtraq/2012-09/0043.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.apple.com/archives/security-announce/2013/Oct/msg00006.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090171.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00023.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://osvdb.org/85325",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://rhn.redhat.com/errata/RHSA-2012-1326.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://rhn.redhat.com/errata/RHSA-2012-1327.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/50484",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/50584",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/50637",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/50770",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2012/dsa-2546",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDVSA-2012:159",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.openwall.com/lists/oss-security/2012/09/10/2",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.pre-cert.de/advisories/PRE-SA-2012-06.txt",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/55483",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securitytracker.com/id?1027509",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.ubuntu.com/usn/USN-1585-1",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/78408",
      },
   ],
   sourceIdentifier: "secalert@redhat.com",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-119",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "E95ADE53-BFBE-4B06-A1BF-EF576D567554",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "SQL injection vulnerability in the radius_xlat function in the SQL module for FreeRADIUS 1.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via (1) group_membership_query, (2) simul_count_query, or (3) simul_verify_query configuration entries.",
      },
   ],
   id: "CVE-2005-1454",
   lastModified: "2025-04-03T01:03:51.193",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 7.5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: true,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2005-05-19T04:00:00.000",
   references: [
      {
         source: "secalert@redhat.com",
         url: "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.freeradius.org/security.html",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Patch",
         ],
         url: "http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.novell.com/linux/security/advisories/2005_14_sr.html",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.redhat.com/support/errata/RHSA-2005-524.html",
      },
      {
         source: "secalert@redhat.com",
         tags: [
            "Patch",
         ],
         url: "http://www.securityfocus.com/bid/13540",
      },
      {
         source: "secalert@redhat.com",
         url: "http://www.securitytracker.com/alerts/2005/May/1013909.html",
      },
      {
         source: "secalert@redhat.com",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/20449",
      },
      {
         source: "secalert@redhat.com",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9610",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-05/0492.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.freeradius.org/security.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
         ],
         url: "http://www.gentoo.org/security/en/glsa/glsa-200505-13.xml",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.novell.com/linux/security/advisories/2005_14_sr.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.redhat.com/support/errata/RHSA-2005-524.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
         ],
         url: "http://www.securityfocus.com/bid/13540",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securitytracker.com/alerts/2005/May/1013909.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/20449",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9610",
      },
   ],
   sourceIdentifier: "secalert@redhat.com",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "NVD-CWE-Other",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "388D7673-6BA7-4113-86E1-00F9A60C8796",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "7B5B5D50-C251-4569-9D2C-49FB64702646",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "A693BD6B-BCFF-461B-B71D-4E6F7A614979",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "6E1D867F-7147-4C97-927B-C10404CC2985",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "4C30EB50-6BCD-44E4-906A-618ACCF627DC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "A8C129A8-59C9-4780-8454-4EB112DF0B40",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "13C228DD-0EB3-4348-8D7A-D17A59E92013",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "2400422C-8E52-4946-BE83-AA7167F0F703",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "0B421C2D-290B-4439-BED6-4C0AEBAF484B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "09685697-9D74-4ECA-ACB0-DF08A1442DF0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "4D536C78-5619-4B01-A838-EB348B6D947E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "9C3482E5-E818-40CE-A061-4469F3CAC702",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "2595550B-8820-471A-9D23-C40A848B73FE",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "15D7F150-6B47-44B8-82A9-5E03AC83B05D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "5600607D-209E-4A7B-AC82-657638232D13",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "C236E624-8DE0-46CD-A9F1-951D1CDD9F58",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*",
                     matchCriteriaId: "2076747F-A98E-4DD9-9B52-BF1732BCAD3D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
                     matchCriteriaId: "F84B2729-7B52-4505-9656-1BD31B980705",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*",
                     matchCriteriaId: "F2681D87-58A9-4A56-BE97-B00C5061CA32",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*",
                     matchCriteriaId: "5A633996-2FD7-467C-BAA6-529E16BD06D1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*",
                     matchCriteriaId: "5F150BD9-4B94-42D3-9E14-58665B7FF220",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.",
      },
      {
         lang: "es",
         value: "FreeRADIUS 2.2.x en versiones anteriores a 2.2.8 y 3.0.x en versiones anteriores a 3.0.9 no comprueba adecuadamente la revocación de certificados CA intermedios.",
      },
   ],
   id: "CVE-2015-4680",
   lastModified: "2024-11-21T02:31:33.000",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "NONE",
               baseScore: 5,
               confidentialityImpact: "NONE",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:N/I:P/A:N",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 2.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV30: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "NONE",
               baseScore: 7.5,
               baseSeverity: "HIGH",
               confidentialityImpact: "NONE",
               integrityImpact: "HIGH",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
               version: "3.0",
            },
            exploitabilityScore: 3.9,
            impactScore: 3.6,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2017-04-05T17:59:00.197",
   references: [
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
         ],
         url: "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "http://www.ocert.org/advisories/ocert-2015-008.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/archive/1/535810/100/0/threaded",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securityfocus.com/bid/75327",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1032690",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Issue Tracking",
            "Patch",
         ],
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=1234975",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
         ],
         url: "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Third Party Advisory",
         ],
         url: "http://www.ocert.org/advisories/ocert-2015-008.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/535810/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securityfocus.com/bid/75327",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1032690",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Issue Tracking",
            "Patch",
         ],
         url: "https://bugzilla.redhat.com/show_bug.cgi?id=1234975",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-295",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "49152208-4DBD-4AF7-BCB3-3D56650899F7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "90AF846A-F239-4963-B260-7CB48334B8B4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "E95ADE53-BFBE-4B06-A1BF-EF576D567554",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "3F03F8FE-80BA-41A3-85CE-FFB6A18E6DCE",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "4C48FE12-68CB-462D-B75E-204894325F5D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "1321F1E7-4B14-4B16-91D0-AE9E9951D12A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:1.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "313EFEC5-1580-4ACE-BB9C-84E3714F2C37",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via \"Insufficient input validation\" in the EAP-MSCHAPv2 state machine module.",
      },
   ],
   id: "CVE-2006-1354",
   lastModified: "2025-04-03T01:03:51.193",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 7.5,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "PARTIAL",
               vectorString: "AV:N/AC:L/Au:N/C:P/I:P/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 6.4,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: true,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2006-03-22T02:02:00.000",
   references: [
      {
         source: "cve@mitre.org",
         url: "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
      },
      {
         source: "cve@mitre.org",
         url: "http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://rhn.redhat.com/errata/RHSA-2006-0271.html",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/19300",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/19405",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/19518",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/19527",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/19811",
      },
      {
         source: "cve@mitre.org",
         url: "http://secunia.com/advisories/20461",
      },
      {
         source: "cve@mitre.org",
         url: "http://securitytracker.com/id?1015795",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.debian.org/security/2006/dsa-1089",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.freeradius.org/security.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:060",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/bid/17171",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.trustix.org/errata/2006/0020",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.vupen.com/english/advisories/2006/1016",
      },
      {
         source: "cve@mitre.org",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/25352",
      },
      {
         source: "cve@mitre.org",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://rhn.redhat.com/errata/RHSA-2006-0271.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/19300",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/19405",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/19518",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/19527",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/19811",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/20461",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securitytracker.com/id?1015795",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2006/dsa-1089",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.freeradius.org/security.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.gentoo.org/security/en/glsa/glsa-200604-03.xml",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.mandriva.com/security/advisories?name=MDKSA-2006:060",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/17171",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.trustix.org/errata/2006/0020",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.vupen.com/english/advisories/2006/1016",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/25352",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10156",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "NVD-CWE-Other",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "388D7673-6BA7-4113-86E1-00F9A60C8796",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "7B5B5D50-C251-4569-9D2C-49FB64702646",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "A693BD6B-BCFF-461B-B71D-4E6F7A614979",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "6E1D867F-7147-4C97-927B-C10404CC2985",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "4C30EB50-6BCD-44E4-906A-618ACCF627DC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "A8C129A8-59C9-4780-8454-4EB112DF0B40",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "13C228DD-0EB3-4348-8D7A-D17A59E92013",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "2400422C-8E52-4946-BE83-AA7167F0F703",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "76048BE7-ABC9-4177-A6A6-03CD267708A3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "00F2F28A-E975-469F-8720-ACAD38230A70",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "D0D08EA5-E832-40D7-9530-079C400B050E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "C50B666B-B423-4182-BD9A-8893B66848AF",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows \"DHCP - Infinite read in dhcp_attr2vp()\" and a denial of service.",
      },
      {
         lang: "es",
         value: "Un problema FR-GV-303 en FreeRADIUS versión 3.x anterior a 3.0.15, permite una \"DHCP - Infinite read in dhcp_attr2vp()\" y una denegación de servicio.",
      },
   ],
   id: "CVE-2017-10986",
   lastModified: "2024-11-21T03:06:53.763",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 5,
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 2.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV30: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 7.5,
               baseSeverity: "HIGH",
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
               version: "3.0",
            },
            exploitabilityScore: 3.9,
            impactScore: 3.6,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2017-07-17T17:29:00.430",
   references: [
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security/fuzzer-2017.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.debian.org/security/2017/dsa-3930",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/bid/99971",
      },
      {
         source: "cve@mitre.org",
         url: "https://access.redhat.com/errata/RHSA-2017:2389",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security/fuzzer-2017.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2017/dsa-3930",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/99971",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://access.redhat.com/errata/RHSA-2017:2389",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-835",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "95921E03-2F8B-4E9B-8305-15ECE1A2D20B",
                     versionEndIncluding: "1.1.3",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [
      {
         sourceIdentifier: "cve@mitre.org",
         tags: [
            "disputed",
         ],
      },
   ],
   descriptions: [
      {
         lang: "en",
         value: "Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance.  NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited \"only to local administrators who have write access to the server configuration files.\"  CVE concurs with the dispute",
      },
      {
         lang: "es",
         value: "** DISPUTADA** Desbordamiento de búfer en la función SMB_Connect_Server en FreeRadius 1.1.3 y anteriores permite a un atacante remoto ejecutar código arbitrario relacionado con el campo de servidor desthost de una instancia SMB_Handle_Type. NOTA: el impacto de este asunto ha sido disputado por una tercera parte fiable, que dice que la explotación se límita 'exclusivamente a administradores locales que tienen acceso de escritura a los ficheros de configuración de servidores'. CVE está de acuerdo con la disputa.",
      },
   ],
   evaluatorComment: "A buffer overflow in the SMB_Connect_Server function in FreeRADIUS 1.1.4 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance.  This issue can not be exploited remotely, and can only be exploited by administrators who have write access to the server configuration files.",
   evaluatorImpact: "-- Official Vendor Statement from the FreeRADIUS Server project\r\n\r\nThis issue is not a security vulnerability.  The exploit is available only to local administrators who have write access to the server configuration files.  As such, this issue has no security impact on any system running FreeRADIUS.\r\n\r\n-- Official Vendor Statement from the FreeRADIUS Server project\r\n",
   id: "CVE-2007-0080",
   lastModified: "2025-04-09T00:30:58.490",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "MEDIUM",
               accessVector: "LOCAL",
               authentication: "SINGLE",
               availabilityImpact: "COMPLETE",
               baseScore: 6.6,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:L/AC:M/Au:S/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 2.7,
            impactScore: 10,
            obtainAllPrivilege: true,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2007-01-05T11:28:00.000",
   references: [
      {
         source: "cve@mitre.org",
         url: "http://osvdb.org/32082",
      },
      {
         source: "cve@mitre.org",
         url: "http://securitytracker.com/id?1017463",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.attrition.org/pipermail/vim/2007-February/001304.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.freeradius.org/security.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/archive/1/455678/100/0/threaded",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/archive/1/455812/100/0/threaded",
      },
      {
         source: "cve@mitre.org",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/31248",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://osvdb.org/32082",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securitytracker.com/id?1017463",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.attrition.org/pipermail/vim/2007-February/001304.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.freeradius.org/security.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/455678/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/455812/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/31248",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vendorComments: [
      {
         comment: "Not vulnerable.  The affected code is in an optional module that is not shipped in Red Hat Enterprise Linux 2.1, 3, or 4.",
         lastModified: "2007-01-05T00:00:00",
         organization: "Red Hat",
      },
   ],
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-119",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "B1F041B7-4DDB-406E-8A89-D2DDABD4AF96",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.0:pre1:*:*:*:*:*:*",
                     matchCriteriaId: "5DA3BD5F-8CB9-4907-92C5-7A4E884CE1D4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.0:pre2:*:*:*:*:*:*",
                     matchCriteriaId: "3D7056CF-FF7C-4175-907A-A47984A82CB4",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "9C4A43D5-03CA-4AAA-98A8-4EC86EC3EACB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "8DDB64CF-D48E-4E3E-A1E8-B6AE330A6C99",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "25BF923C-F7CD-4232-8613-B1F09C7B9A35",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "6A113B67-B9B6-421C-9EC9-E1FB462A4214",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "6518E4DA-9531-4135-8462-A9E3BDD7AE38",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "5B92B1F7-8139-4D5A-9461-0C7314BCCBC5",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "C5CAEB64-0676-4C18-8255-DACDA612188E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "17F7A434-49DC-4005-9161-F2B49559621F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "7A54D59A-B832-4EE3-A8D6-A85EC17C268A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "D494932F-F639-44BE-B15C-7F07A67B0502",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "D2D45784-C53B-4A11-B1B3-BC68B514002D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "E969979B-2852-453D-AF48-A462448D4C62",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "0E56E3E2-9142-47F5-B53E-61ACE4FA9A90",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "CE0CFEA6-1AC0-41AA-BEF0-16FE1A933758",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "C593C44B-CB2B-4C38-A44D-BA1BC9BF3CDB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "908DA549-0EE5-4B85-961F-1C67210F6AED",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.1.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "91FBBBC1-7106-4DA1-BBCF-9D776BB082ED",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "0B421C2D-290B-4439-BED6-4C0AEBAF484B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "09685697-9D74-4ECA-ACB0-DF08A1442DF0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "4D536C78-5619-4B01-A838-EB348B6D947E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "9C3482E5-E818-40CE-A061-4469F3CAC702",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "2595550B-8820-471A-9D23-C40A848B73FE",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "15D7F150-6B47-44B8-82A9-5E03AC83B05D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "5600607D-209E-4A7B-AC82-657638232D13",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "C236E624-8DE0-46CD-A9F1-951D1CDD9F58",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "11403C9E-7217-43AF-9BF4-371FA2623C12",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:2.2.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "86A2EC8C-840A-4DB2-8038-7E0E2D704EA5",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows \"DHCP - Buffer over-read in fr_dhcp_decode_options()\" and a denial of service.",
      },
      {
         lang: "es",
         value: "Un problema FR-GV-205 en FreeRADIUS versión 2.x anterior a 2.2.10, permite una \"DHCP - Buffer over-read in fr_dhcp_decode_options()\" y una denegación de servicio.",
      },
   ],
   id: "CVE-2017-10982",
   lastModified: "2024-11-21T03:06:53.087",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "MEDIUM",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "PARTIAL",
               baseScore: 5,
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:P",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 2.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV30: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 7.5,
               baseSeverity: "HIGH",
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
               version: "3.0",
            },
            exploitabilityScore: 3.9,
            impactScore: 3.6,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2017-07-17T17:29:00.307",
   references: [
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security/fuzzer-2017.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.debian.org/security/2017/dsa-3930",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/bid/99912",
      },
      {
         source: "cve@mitre.org",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1038914",
      },
      {
         source: "cve@mitre.org",
         url: "https://access.redhat.com/errata/RHSA-2017:1759",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security/fuzzer-2017.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2017/dsa-3930",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/99912",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1038914",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://access.redhat.com/errata/RHSA-2017:1759",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-125",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "388D7673-6BA7-4113-86E1-00F9A60C8796",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "7B5B5D50-C251-4569-9D2C-49FB64702646",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "A693BD6B-BCFF-461B-B71D-4E6F7A614979",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "6E1D867F-7147-4C97-927B-C10404CC2985",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "4C30EB50-6BCD-44E4-906A-618ACCF627DC",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "A8C129A8-59C9-4780-8454-4EB112DF0B40",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "13C228DD-0EB3-4348-8D7A-D17A59E92013",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "2400422C-8E52-4946-BE83-AA7167F0F703",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "E1841E98-2B17-4DFC-B03F-4E4537D8A6A7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "76048BE7-ABC9-4177-A6A6-03CD267708A3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "00F2F28A-E975-469F-8720-ACAD38230A70",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "D0D08EA5-E832-40D7-9530-079C400B050E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "FAFBD765-22E7-446B-B0E9-FCE7DDB1B90E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:freeradius:freeradius:3.0.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "C50B666B-B423-4182-BD9A-8893B66848AF",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows \"Infinite loop and memory exhaustion with 'concat' attributes\" and a denial of service.",
      },
      {
         lang: "es",
         value: "Un problema FR-GV-302 en FreeRADIUS versión 3.x anterior a 3.0.15, permite un \"Infinite loop and memory exhaustion with 'concat' attributes\" y una denegación de servicio.",
      },
   ],
   id: "CVE-2017-10985",
   lastModified: "2024-11-21T03:06:53.600",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 7.8,
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               vectorString: "AV:N/AC:L/Au:N/C:N/I:N/A:C",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 6.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV30: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 7.5,
               baseSeverity: "HIGH",
               confidentialityImpact: "NONE",
               integrityImpact: "NONE",
               privilegesRequired: "NONE",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
               version: "3.0",
            },
            exploitabilityScore: 3.9,
            impactScore: 3.6,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2017-07-17T17:29:00.400",
   references: [
      {
         source: "cve@mitre.org",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security/fuzzer-2017.html",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.debian.org/security/2017/dsa-3930",
      },
      {
         source: "cve@mitre.org",
         url: "http://www.securityfocus.com/bid/99968",
      },
      {
         source: "cve@mitre.org",
         url: "https://access.redhat.com/errata/RHSA-2017:2389",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://freeradius.org/security/fuzzer-2017.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.debian.org/security/2017/dsa-3930",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/99968",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://access.redhat.com/errata/RHSA-2017:2389",
      },
   ],
   sourceIdentifier: "cve@mitre.org",
   vulnStatus: "Modified",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-835",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}