In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade python3-freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-krb5Upgrade freeradius-devel | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-devel | Mar 7, 2023 | Jan 17, 2023 |
| Amazon_linux | — | Upgrade freeradius | Mar 7, 2023 | Dec 27, 2022 |
| Centos_linux | — | Upgrade freeradius-debugsourceUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-perlUpgrade freeradius-rest-debuginfoUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-mysql-debuginfoUpgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade python3-freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-unixODBC-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-perlUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-mysql | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-utilsUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysqlUpgrade python3-freeradiusUpgrade python3-freeradius-debuginfoUpgrade freeradius-docUpgrade freeradius-ldap-debuginfoUpgrade freeradius-perlUpgrade freeradius-debugsourceUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-perl-debuginfoUpgrade freeradius-restNo solution existsUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-unixODBC | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradiusUpgrade freeradius-mysqlUpgrade freeradius-doc | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-docUpgrade freeradius-server-mysqlUpgrade freeradius-server-postgresqlUpgrade freeradius-server-libsUpgrade freeradius-server-sqliteUpgrade freeradius-server-utilsUpgrade freeradius-server-krb5Upgrade freeradius-server-perlUpgrade freeradius-server-develUpgrade freeradius-server-python3Upgrade freeradius-server-ldapUpgrade freeradius-server-pythonUpgrade freeradius-serverUpgrade freeradius-server-ldap-schemas | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub