An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows Read / write overflow in make_secret() and a denial of service. https://nvd.nist.gov/vuln/detail/CVE-2017-10978