PatchTheCVECVE-2007-0080: Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute
CVE-2007-0080 is a medium-severity flaw (CVSS 6.6) affecting freeradius. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance. NOTE: the impact of this issue has been disputed by a reliable third party and the vendor, who states that exploitation is limited "only to local administrators who have write access to the server configuration files." CVE concurs with the dispute
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.6 (Medium) |
| EPSS exploit chance | 0.4% (top 61%) |
| CISA exploited list | No |
| Weakness | CWE-119 |
| Published | 2007-01-05 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2007-0080?
freeradius: upgrade to newer than 1.1.3. Exact commands for each OS are on this page.
Is CVE-2007-0080 being exploited?
CVE-2007-0080 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2007-0080 affect?
CVE-2007-0080 affects freeradius. Severity is medium (CVSS 6.6). Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost field of an SMB_Handle_Type instance. NOTE: the impact of this issue has been disp
How urgent is CVE-2007-0080?
Priority 33/100. No elevated risk signals yet.
Related CVEs
- CVE-2024-3596 CRITICAL 9.0 UPGRADE MITIGATE RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid
- CVE-2022-41861 MEDIUM 6.5 UPGRADE A flaw was found in freeradius
- CVE-2022-41860 HIGH 7.5 UPGRADE In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option
- CVE-2022-41859 HIGH 7.5 UPGRADE In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allo
- CVE-2019-17185 HIGH 7.5 UPGRADE MITIGATE In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all hand