CVE-2026-127029 · Package
NO FIX YET · SEE WHAT TO DO
FreeRADIUS copies a client-supplied EAP-SIM identity into a fixed-size stack buffer without a length check. An unauthenticated remote attacker can send crafted EAP-SIM messages to overflow the buffer and crash the service, causing denial of service.
first public Nov 12, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
FreeRADIUS servers with the EAP-SIM method enabled (usually mobile-operator Wi-Fi offload or SIM-based Wi-Fi authentication). A remote client can send an overlong EAP-SIM identity and crash the server, which cuts off authentication for everyone using it. Servers that do not use EAP-SIM, or that sit on a management VLAN unreachable by untrusted clients, can skip it. Affected version ranges are not yet published.
Not affected if eap-sim-disabled, not-internet-exposed
Who cares freeradius, radius, self-hosted, wifi-auth
make EAP-SIM independent of identity length), but no release containing it is confirmed3.2.11 was announced 22 Oct 2026 as including TEAP and FAST fixes only; EAP-SIM is not mentionedA flaw was found in freeradius's Extensible Authentication Protocol Method for Subscriber Identity Module (EAP-SIM) module. When handling authentication requests, the server copies a client-supplied identity into an internal structure without properly checking its length against a fixed-size buffer. An unauthenticated remote attacker can exploit this issue by sending specially crafted EAP-SIM messages, triggering a stack buffer overflow that crashes the service and results in a Denial of Service (DoS).
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.