CVE-2021-29629

7.5 highEPSS 1.2%

High (7.5) in freebsd freebsd. EPSS 1.2% chance of exploitation in the next 30 days.

In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE before p7, and 11.4-RELEASE before p10, missing message validation in libradius(3) could allow malicious clients or servers to trigger denial of service in vulnerable servers or clients respectively.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2021-05-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freebsd:freebsd

References

https://security.FreeBSD.org/advisories/FreeBSD-SA-21:12.libradius.asc
https://security.netapp.com/advisory/ntap-20210713-0003/
https://security.FreeBSD.org/advisories/FreeBSD-SA-21:12.libradius.asc
https://security.netapp.com/advisory/ntap-20210713-0003/

Check your stack JSON