It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Nov 8, 2019 | May 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-krb5Upgrade freeradius-pythonUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-develUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-debuginfoUpgrade freeradius-sqlite | Oct 28, 2020 | May 24, 2019 |
| Centos_linux | — | Upgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-pythonUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debugsourceUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-postgresqlUpgrade freeradius-utils | Nov 6, 2019 | May 24, 2019 |
| Debian | — | No solution existsUpgrade freeradius | May 15, 2025 | May 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | Jul 23, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | Sep 25, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | Jul 2, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Jul 26, 2019 | May 24, 2019 |
| Oracle_linux | — | Upgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-rest | Oct 7, 2020 | May 1, 2019 |
| Redhat_linux | — | Upgrade freeradius-sqlite-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-postgresqlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-docNo solution existsUpgrade freeradius-unixODBCUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restUpgrade freeradius-debugsourceUpgrade freeradius-debuginfoUpgrade freeradius-ldap | Nov 6, 2019 | May 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub