It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Nov 8, 2019 | May 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-develUpgrade freeradius-debuginfoUpgrade freeradius-pythonUpgrade freeradius-perl | Oct 28, 2020 | May 24, 2019 |
| Centos_linux | — | Upgrade freeradius-perl-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-debugsourceUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-restUpgrade freeradius-krb5-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-rest-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-pythonUpgrade freeradius-mysql-debuginfo | Nov 6, 2019 | May 24, 2019 |
| Debian | — | Upgrade freeradiusNo solution exists | May 15, 2025 | May 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | Jul 23, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | Sep 25, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | Jul 2, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Jul 26, 2019 | May 24, 2019 |
| Oracle_linux | — | Upgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-restUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius | Oct 7, 2020 | May 1, 2019 |
| Redhat_linux | — | Upgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysqlNo solution existsUpgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-perl-debuginfoUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-perlUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-krb5-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-ldap | Nov 6, 2019 | May 24, 2019 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub