CVE:CVE-2017-10978
CNNVD:CNNVD-201707-703
FreeRADIUS是FreeRADIUS Server项目的一套实现了RADIUS协议的软件。该软件主要用于账户认证管理、记账管理和上网账户管理等，并包含有一个Radius服务器、一个BSD协议授权的客户端库、一个PAM库和一个Apache模块。
FreeRADIUS 2.2.10之前的2.x版本和3.0.15之前的3.x版本中的‘make_secret()’函数存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade freeradius freeradius to a higher version than 2.2.10,3.0.15,and avoid the version [2.0,2.2.10),[3.0.0,3.0.15); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_server_aus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_server_eus to a higher version than 7.4,7.5,7.6,7.7,and avoid the version 7.4,7.5,7.6,7.7; Upgrade redhat enterprise_linux_server_tus to a higher version than 7.4,7.6,7.7,and avoid the version 7.4,7.6,7.7; Upgrade redhat enterprise_linux_workstation to a higher version than 6.0,7.0,and avoid the version 6.0,7.0