Read the docs
TI-2021-10337 Aliases CVE-2021-29629GHSA-hmvq-2v7j-42hv

Improper input validation in FreeBSD

Priority LOW 35CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE before p7, and 11.4-RELEASE before p10, missing message validation in libradius(3) could allow malicious clients or servers to trigger denial of service in vulnerable servers or clients respectively.

Why it matters now

EPSS 0.01159 67th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—FreeBSDFreeBSD 13.0-RELEASE before p1, 12.2-RELEASE before p7, 11.4-RELEASE before p10—No fix listedCNA
  • FreeBSD Vendor— Affected FreeBSD 13.0-RELEASE before p1, 12.2-RELEASE before p7, 11.4-RELEASE before p10 Fixed in — No fix listed CNA

CPE configurations NVD · 26

CPEVersionsRoleVendor
cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*11.4VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*11.4 beta1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*11.4 p1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*11.4 p2VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*11.4 p3VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*11.4 p4VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*11.4 p5VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:*11.4 p6VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:*11.4 p7VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:p8:*:*:*:*:*:*11.4 p8VulnerableFreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:* Versions 11.4 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:* Versions 11.4 beta1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:* Versions 11.4 p1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:* Versions 11.4 p2 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:* Versions 11.4 p3 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:* Versions 11.4 p4 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:* Versions 11.4 p5 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p6:*:*:*:*:*:* Versions 11.4 p6 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p7:*:*:*:*:*:* Versions 11.4 p7 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p8:*:*:*:*:*:* Versions 11.4 p8 Vulnerable ·FreeBSD
Show 16 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:freebsd:freebsd:11.4:p9:*:*:*:*:*:*11.4 p9VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:rc1:*:*:*:*:*:*11.4 rc1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:*11.4 rc2VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*12.2VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:beta1-p1:*:*:*:*:*:*12.2 beta1-p1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*12.2 p1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*12.2 p2VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:*12.2 p3VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:p4:*:*:*:*:*:*12.2 p4VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:p5:*:*:*:*:*:*12.2 p5VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:12.2:p6:*:*:*:*:*:*12.2 p6VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:13.0:-:*:*:*:*:*:*13.0VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:13.0:beta3-p1:*:*:*:*:*:*13.0 beta3-p1VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*13.0 rc3VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*13.0 rc4VulnerableFreeBSD
cpe:2.3:o:freebsd:freebsd:13.0:rc5-p1:*:*:*:*:*:*13.0 rc5-p1VulnerableFreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:p9:*:*:*:*:*:* Versions 11.4 p9 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:rc1:*:*:*:*:*:* Versions 11.4 rc1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:* Versions 11.4 rc2 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:* Versions 12.2 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:beta1-p1:*:*:*:*:*:* Versions 12.2 beta1-p1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:* Versions 12.2 p1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:* Versions 12.2 p2 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:p3:*:*:*:*:*:* Versions 12.2 p3 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:p4:*:*:*:*:*:* Versions 12.2 p4 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:p5:*:*:*:*:*:* Versions 12.2 p5 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:12.2:p6:*:*:*:*:*:* Versions 12.2 p6 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:13.0:-:*:*:*:*:*:* Versions 13.0 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:13.0:beta3-p1:*:*:*:*:*:* Versions 13.0 beta3-p1 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:* Versions 13.0 rc3 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:* Versions 13.0 rc4 Vulnerable ·FreeBSD
  • cpe:2.3:o:freebsd:freebsd:13.0:rc5-p1:*:*:*:*:*:* Versions 13.0 rc5-p1 Vulnerable ·FreeBSD

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-29629
  2. 2026-10-03 Alias added: GHSA-hmvq-2v7j-42hv

References

Advisory 2

  • TI-2011-04182 Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT… CVSS 2.0HIGH 10.0
  • TI-2007-03684 Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows… CVSS 3.1CRITICAL 9.8
  • TI-2002-00376 Integer overflow in xdr_array function in RPC servers for operating systems that use… CVSS 3.1CRITICAL 9.8
  • TI-2024-05929 Openssh: regresshion - race condition in ssh allows rce/dos CVSS 3.1HIGH 8.1
  • TI-2003-00437 Off-by-one error in the fb_realpath() function, as derived from the realpath function in… CVSS 3.1CRITICAL 9.8
  • TI-2003-00642 The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code… CVSS 2.0HIGH 10.0
See all 576 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences