Test ID:	1.3.6.1.4.1.25623.1.0.703930
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-3930-1)
Summary:	The remote host is missing an update for the Debian 'freeradius' package(s) announced via the DSA-3930-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'freeradius' package(s) announced via the DSA-3930-1 advisory. Vulnerability Insight: Guido Vranken discovered that FreeRADIUS, an open source implementation of RADIUS, the IETF protocol for AAA (Authorisation, Authentication, and Accounting), did not properly handle memory when processing packets. This would allow a remote attacker to cause a denial-of-service by application crash, or potentially execute arbitrary code. All those issues are covered by this single DSA, but it's worth noting that not all issues affect all releases: CVE-2017-10978 and CVE-2017-10983 affect both jessie and stretch, CVE-2017-10979, CVE-2017-10980, CVE-2017-10981 and CVE-2017-10982 affect only jessie, CVE-2017-10984, CVE-2017-10985, CVE-2017-10986 and CVE-2017-10987 affect only stretch. For the oldstable distribution (jessie), these problems have been fixed in version 2.2.5+dfsg-0.2+deb8u1. For the stable distribution (stretch), these problems have been fixed in version 3.0.12+dfsg-5+deb9u1. We recommend that you upgrade your freeradius packages. Affected Software/OS: 'freeradius' package(s) on Debian 8, Debian 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-10978 BugTraq ID: 99893 http://www.securityfocus.com/bid/99893 Debian Security Information: DSA-3930 (Google Search) http://www.debian.org/security/2017/dsa-3930 RedHat Security Advisories: RHSA-2017:1759 https://access.redhat.com/errata/RHSA-2017:1759 RedHat Security Advisories: RHSA-2017:2389 https://access.redhat.com/errata/RHSA-2017:2389 http://www.securitytracker.com/id/1038914 Common Vulnerability Exposure (CVE) ID: CVE-2017-10983 BugTraq ID: 99915 http://www.securityfocus.com/bid/99915
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.