Two vulnerabilities have been identified in FreeRADIUS, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) The vulnerability is caused due to a boundary error caused by mishandling of certain tagged RADIUS attributes (e.g. the "Tunnel-Password" attribute). This may cause a heap overflow, which can be exploited by sending malformed packets to the service.

Successful exploitation requires that the packets originate from an IP address listed as a RADIUS client.

2) It is possible to crash the service due to a NULL pointer dereference bug, which can be exploited by sending an "Access-Request" packet containing a "Tunnel-Password" attribute.

Solution
Update to version 0.9.3:
Further details available in Customer Area

Deep Links
Links available in Customer Area