--- title: 'USN-3369-1: FreeRADIUS vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-3369-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-3369-1 --- # USN-3369-1: FreeRADIUS vulnerabilities Publication date 27 July 2017 Overview Several security issues were fixed in FreeRADIUS. Releases [17.04](https://ubuntu.com/security/notices?release=zesty) [16.04 LTS](https://ubuntu.com/security/notices?release=xenial) [14.04 LTS](https://ubuntu.com/security/notices?release=trusty) --- Open side navigation ## Packages * [freeradius](https://ubuntu.com/security/cves?package=freeradius) - high-performance and highly configurable RADIUS server ## Details Guido Vranken discovered that FreeRADIUS incorrectly handled memory when decoding packets. A remote attacker could use this issue to cause FreeRADIUS to crash or hang, resulting in a denial of service, or possibly execute arbitrary code. ## Update instructions In general, a standard system update will make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 17.04 zesty | [freeradius](https://launchpad.net/ubuntu/+source/freeradius) –  [3.0.12+dfsg-4ubuntu1.2](https://launchpad.net/ubuntu/+source/freeradius/3.0.12+dfsg-4ubuntu1.2) | | | | 16.04 LTS xenial | [freeradius](https://launchpad.net/ubuntu/+source/freeradius) –  [2.2.8+dfsg-0.1ubuntu0.1](https://launchpad.net/ubuntu/+source/freeradius/2.2.8+dfsg-0.1ubuntu0.1) | | | | 14.04 LTS trusty | [freeradius](https://launchpad.net/ubuntu/+source/freeradius) –  [2.1.12+dfsg-1.2ubuntu8.2](https://launchpad.net/ubuntu/+source/freeradius/2.1.12+dfsg-1.2ubuntu8.2) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2017-10987](https://ubuntu.com/security/CVE-2017-10987) * [CVE-2017-10986](https://ubuntu.com/security/CVE-2017-10986) * [CVE-2017-10985](https://ubuntu.com/security/CVE-2017-10985) * [CVE-2017-10984](https://ubuntu.com/security/CVE-2017-10984) * [CVE-2017-10983](https://ubuntu.com/security/CVE-2017-10983) * [CVE-2017-10982](https://ubuntu.com/security/CVE-2017-10982) * [CVE-2017-10981](https://ubuntu.com/security/CVE-2017-10981) * [CVE-2017-10980](https://ubuntu.com/security/CVE-2017-10980) * [CVE-2017-10979](https://ubuntu.com/security/CVE-2017-10979) * [CVE-2017-10978](https://ubuntu.com/security/CVE-2017-10978)