In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-debuginfo | Oct 28, 2020 | Dec 3, 2019 |
| Centos_linux | — | Upgrade freeradius-perlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade freeradius-debugsourceUpgrade freeradius-mysql-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-restUpgrade freeradius-ldapUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-utilsUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-utils-debuginfoUpgrade freeradius-sqlite-debuginfo | Apr 29, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-krb5 | Oct 7, 2020 | Aug 3, 2019 |
| Redhat_linux | — | Upgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-rest-debuginfoUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-mysql-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-debugsourceUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-restUpgrade freeradius-perl-debuginfoUpgrade freeradius-python | Apr 29, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade freeradius-server-python3Upgrade freeradius-server-utilsUpgrade freeradius-server-libsUpgrade freeradius-server-sqliteUpgrade freeradius-server-postgresqlUpgrade freeradius-serverUpgrade freeradius-server-mysqlUpgrade freeradius-server-ldapUpgrade freeradius-server-krb5Upgrade freeradius-server-develUpgrade freeradius-server-perlUpgrade freeradius-server-pythonUpgrade freeradius-server-doc | Apr 18, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub