It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 6.4
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Nov 8, 2019 | May 24, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-sqlite | Oct 28, 2020 | May 24, 2019 |
| Centos_linux | — | Upgrade freeradius-utilsUpgrade freeradius-debugsourceUpgrade freeradius-docUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perl-debuginfoUpgrade freeradius-perlUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-ldapUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-devel | Nov 6, 2019 | May 24, 2019 |
| Debian | — | Upgrade freeradiusNo solution exists | May 15, 2025 | May 24, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | Jul 23, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | Sep 25, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | Jul 2, 2019 | May 24, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Jul 26, 2019 | May 24, 2019 |
| Oracle_linux | — | Upgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-doc | Oct 7, 2020 | May 1, 2019 |
| Redhat_linux | — | Upgrade freeradius-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-restUpgrade freeradius-krb5-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-develUpgrade freeradius-utilsUpgrade freeradius-utils-debuginfoUpgrade freeradius-pythonUpgrade freeradiusUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-rest-debuginfoNo solution exists | Nov 6, 2019 | May 24, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub