FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Apr 30, 2019 | Apr 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-ldap | Apr 27, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade freeradiusUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-docUpgrade freeradius-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-unixODBCUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-krb5-debuginfoUpgrade freeradius-ldapUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-devel | May 17, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradius-devel | Jul 21, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-debugsourceUpgrade freeradius-mysql-debuginfoUpgrade freeradiusUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade freeradius-rest-debuginfoUpgrade freeradius-develUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-ldapUpgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-perl-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-pythonUpgrade freeradius-unixODBCUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-postgresql-debuginfo | May 10, 2019 | Apr 22, 2019 |
| Suse | — | Upgrade freeradius-server-krb5Upgrade freeradius-server-sqliteUpgrade freeradius-server-utilsUpgrade freeradius-server-libsUpgrade freeradius-server-pythonUpgrade freeradius-server-python3Upgrade freeradius-server-perlUpgrade freeradius-server-mysqlUpgrade freeradius-server-docUpgrade freeradius-server-develUpgrade freeradius-server-ldapUpgrade freeradius-serverUpgrade freeradius-server-postgresql | Apr 26, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade freeradius | May 2, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub