Total vulnerabilities in the database
The wait_for_child_to_die function in main/event.c in FreeRADIUS 2.1.x before 2.1.10, in certain circumstances involving long-term database outages, does not properly handle long queue times for requests, which allows remote attackers to cause a denial of service (daemon crash) by sending many requests.
| Software | From | Fixed in |
|---|---|---|
| freeradius / freeradius | 2.1.2 | 2.1.2.x |
| freeradius / freeradius | 2.1.1 | 2.1.1.x |
| freeradius / freeradius | 2.1.4 | 2.1.4.x |
| freeradius / freeradius | 2.1.7 | 2.1.7.x |
| freeradius / freeradius | 2.1.8 | 2.1.8.x |
| freeradius / freeradius | 2.1.9 | 2.1.9.x |
| freeradius / freeradius | 2.1.3 | 2.1.3.x |
| freeradius / freeradius | 2.1.0 | 2.1.0.x |
| freeradius / freeradius | 2.1.6 | 2.1.6.x |