RADIUS: Malformed Vendor-Specific Attribute

This protocol anomaly is a RADIUS vendor length that is less than 2, or the sum of all vendor lengths is not equal to length of the Vendor-Specific attribute minus 6. According to the RADIUS RFC, if a Vendor specific string is longer than or equal to 2 bytes, it should be encoded as a sequence of vendor type / vendor length / value fields, where vendor type and length both are eight bit long. The vendor lengths should not be less than 2. The sum of all vendor lengths should be equal to length of the Vendor-Specific attribute minus 6 (6 is the sum of the lengths of other fields including type, length, and vendor id).

References

BugTraq: 99901

CVE: CVE-2017-10979

URL: http://www.faqs.org/rfcs/rfc2865.html

Short Name

RADIUS:MALFORMED_VENDOR_ATTR

Severity

Minor

Recommended

True

Recommended Action

Drop

RADIUS: Malformed Vendor-Specific Attribute

References

Found a potential security threat?