It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Nov 8, 2019 | May 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-docUpgrade freeradius-ldapUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-develUpgrade freeradius-pythonUpgrade freeradius-krb5Upgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradius-unixODBC | Oct 28, 2020 | May 24, 2019 |
| Centos_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-rest-debuginfoUpgrade freeradius-pythonUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-mysql-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-restUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-perl-debuginfoUpgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-utils | Nov 6, 2019 | May 24, 2019 |
| Debian | — | No solution existsUpgrade freeradius | May 15, 2025 | May 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | Jul 23, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | Sep 25, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | Jul 2, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Jul 26, 2019 | May 24, 2019 |
| Oracle_linux | — | Upgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-restUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-utils | Oct 7, 2020 | May 1, 2019 |
| Redhat_linux | — | Upgrade freeradius-ldapUpgrade freeradius-utils-debuginfoUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-perlUpgrade freeradius-debugsourceUpgrade freeradiusUpgrade freeradius-debuginfoUpgrade freeradius-pythonUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-utilsUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-develNo solution existsUpgrade freeradius-docUpgrade freeradius-ldap-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfo | Nov 6, 2019 | May 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub