Gentoo Linux Security Advisory GLSA 200604-03 – FreeRADIUS suffers from insufficient input validation in the EAP-MSCHAPv2 state machine. Versions less than 1.1.1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45248/glsa-200604-03.txt
Source: https://packetstormsecurity.com/files/45248/Gentoo-Linux-Security-Advisory-200604-3.html