FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.
Affected Platforms
Freeradius FreeradiusRedhat Fedora CoreRedhat Enterprise Linux