FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Apr 30, 2019 | Apr 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-postgresql | Apr 27, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-sqlite-debuginfoUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-utils-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-debuginfoUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-python | May 17, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade freeradius-postgresqlUpgrade freeradius-pythonUpgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-devel | Jul 21, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade freeradius-utils-debuginfoUpgrade freeradius-restUpgrade freeradius-pythonUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-docUpgrade freeradius-perl-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5Upgrade freeradius-debuginfoUpgrade freeradiusUpgrade freeradius-debugsourceUpgrade freeradius-mysql | May 10, 2019 | Apr 22, 2019 |
| Suse | — | Upgrade freeradius-server-docUpgrade freeradius-server-perlUpgrade freeradius-server-python3Upgrade freeradius-server-mysqlUpgrade freeradius-server-postgresqlUpgrade freeradius-server-pythonUpgrade freeradius-serverUpgrade freeradius-server-develUpgrade freeradius-server-ldapUpgrade freeradius-server-libsUpgrade freeradius-server-sqliteUpgrade freeradius-server-utilsUpgrade freeradius-server-krb5 | Apr 26, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade freeradius | May 2, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub