An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "3.0.0"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.1"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.2"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.3"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.4"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.5"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.6"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.7"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.8"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.9"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.10"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.11"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.12"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.13"
},
{
"introduced": "0"
},
{
"last_affected": "3.0.14"
}
]
}