An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-10985.json"