Author: Cyberthreat Blog

An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows “DHCP – Memory leak in decode_tlv()” and a denial of service.

An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows “DHCP – Buffer over-read in fr_dhcp_decode_options()” and a denial of service.

An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows “Write overflow in rad_coalesce()” – this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.

Moodle 3.x has user fullname disclosure on the user preferences page.

An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows “Read / write overflow in make_secret()” and a denial of service.