The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Apr 30, 2019 | Apr 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-develUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-ldapUpgrade freeradius-pythonUpgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-perl | Apr 27, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade freeradius-develUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-perlUpgrade freeradius-debugsourceUpgrade freeradius-pythonUpgrade freeradius-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-utils-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5-debuginfo | May 17, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-krb5 | Jul 21, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade freeradius-perl-debuginfoUpgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-debugsourceUpgrade freeradius-rest-debuginfoUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-krb5-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-utils-debuginfoUpgrade freeradius-mysql | May 10, 2019 | Apr 22, 2019 |
| Suse | — | Upgrade freeradius-server-docUpgrade freeradius-server-ldapUpgrade freeradius-server-krb5Upgrade freeradius-serverUpgrade freeradius-server-pythonUpgrade freeradius-server-python3Upgrade freeradius-server-develUpgrade freeradius-server-perlUpgrade freeradius-server-sqliteUpgrade freeradius-server-mysqlUpgrade freeradius-server-libsUpgrade freeradius-server-utilsUpgrade freeradius-server-postgresql | Apr 26, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade freeradius | May 2, 2019 | Apr 22, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub