It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Nov 8, 2019 | May 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-sqliteUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-pythonUpgrade freeradius-utilsUpgrade freeradius-ldap | Oct 28, 2020 | May 24, 2019 |
| Centos_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-mysql-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-debuginfoUpgrade freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utilsUpgrade freeradius-krb5-debuginfoUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-utils-debuginfoUpgrade freeradius-perlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-perl-debuginfo | Nov 6, 2019 | May 24, 2019 |
| Debian | — | Upgrade freeradiusNo solution exists | May 15, 2025 | May 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | Jul 23, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | Sep 25, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | Jul 2, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Jul 26, 2019 | May 24, 2019 |
| Oracle_linux | — | Upgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-restUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-krb5 | Oct 7, 2020 | May 1, 2019 |
| Redhat_linux | — | Upgrade freeradius-utils-debuginfoUpgrade freeradius-develUpgrade freeradius-pythonUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-perl-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-mysql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-unixODBCNo solution existsUpgrade freeradius-krb5Upgrade freeradius-rest-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-doc | Nov 6, 2019 | May 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub