CVE-2026-127030

freeradius: Stack buffer overflow via unchecked EAP-FAST SessionTicket length

freeradius

A flaw was found in freeradius. An improper length validation in the EAP-FAST module allows a stack-based buffer overflow during session ticket processing. A remote, unauthenticated attacker can exploit this flaw by sending a specially crafted handshake request, causing the server process to crash and resulting in a Denial of Service (DoS).

12. Nov 2026

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/security/cve/CVE-2026-127030
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2572340
• NVD
  CVE-2026-127030