Name: CVE-2022-41859: Exposure of Sensitive Information to an Unauthorized Actor
Creator: Rapid7
Published: 2023-01-17T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-41859, CWE-200, CWE-522, CVSS 7.5, EPSS 0.00867

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade freeradius-mysqlUpgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-develUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius	May 15, 2023	Jan 17, 2023
Alpine Linux	—	Upgrade freeradius	Mar 26, 2024	Jan 17, 2023
Amazon Linux Ami 2	—	Upgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradius-debuginfoUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-unixODBC	Mar 7, 2023	Jan 17, 2023
Centos_linux	—	Upgrade python3-freeradius-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-krb5-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-perl-debuginfoUpgrade freeradius-sqliteUpgrade python3-freeradiusUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-debugsourceUpgrade freeradius-docUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-mysql-debuginfo	May 15, 2023	Jan 17, 2023
Debian	—	Upgrade freeradius	Feb 27, 2023	Jan 17, 2023
Oracle_linux	—	Upgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-mysql	May 17, 2023	Apr 22, 2022
Redhat_linux	—	Upgrade freeradius-mysqlUpgrade freeradius-rest-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-mysql-debuginfoUpgrade freeradius-develUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-utils-debuginfoNo solution existsUpgrade freeradius-perl-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade python3-freeradiusUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-ldapUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-perl	May 15, 2023	Jan 17, 2023
Rocky_linux	—	Upgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-sqlite	Jun 29, 2026	Jun 26, 2026
Suse	—	Upgrade freeradius-server-pythonUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-develUpgrade freeradius-server-perlUpgrade freeradius-serverUpgrade freeradius-server-postgresqlUpgrade freeradius-server-docUpgrade freeradius-server-mysqlUpgrade freeradius-server-libsUpgrade freeradius-server-krb5Upgrade freeradius-server-python3Upgrade freeradius-server-ldapUpgrade freeradius-server-sqliteUpgrade freeradius-server-utils	Dec 28, 2022	Dec 27, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business