A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-krb5Upgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-rest | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-postgresqlUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-sqliteUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-devel | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade python3-freeradius-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-sqliteUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-debuginfoUpgrade freeradius-restUpgrade freeradius-rest-debuginfoUpgrade python3-freeradiusUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utilsUpgrade freeradius-ldap | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-sqlite | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-rest-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-krb5-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-docUpgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-develUpgrade freeradius-debuginfoUpgrade freeradius-krb5No solution existsUpgrade freeradius-mysql-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perlUpgrade python3-freeradius-debuginfoUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-debugsourceUpgrade freeradius-postgresqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-ldapUpgrade freeradius-perl-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-perlUpgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-krb5 | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-serverUpgrade freeradius-server-pythonUpgrade freeradius-server-libsUpgrade freeradius-server-sqliteUpgrade freeradius-server-ldapUpgrade freeradius-server-krb5Upgrade freeradius-server-utilsUpgrade freeradius-server-mysqlUpgrade freeradius-server-develUpgrade freeradius-server-python3Upgrade freeradius-server-docUpgrade freeradius-server-postgresqlUpgrade freeradius-server-perlUpgrade freeradius-server-ldap-schemas | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub