CVE-2021-29629: Freebsd

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In FreeBSD 13.0-STABLE before n245765-bec0d2c9c841, 12.2-STABLE before r369859, 11.4-STABLE before r369866, 13.0-RELEASE before p1, 12.2-RELEASE before p7, and 11.4-RELEASE before p10, missing message validation in libradius(3) could allow malicious clients or servers to trigger denial of service in vulnerable servers or clients respectively.

Affected products

  • Freebsd Freebsd: version 11.4 only; version 12.2 only; version 13.0 only

Published 2021-05-28. Last modified 2026-06-17.