FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Apr 30, 2019 | Apr 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius | Apr 27, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5Upgrade freeradius-debugsourceUpgrade freeradiusUpgrade freeradius-ldap-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-mysql-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-perlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-restUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-perl-debuginfoUpgrade freeradius-ldap | May 17, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-devel | Jul 21, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade freeradiusUpgrade freeradius-debugsourceUpgrade freeradius-perlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5Upgrade freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-docUpgrade freeradius-ldapUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utilsUpgrade freeradius-utils-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-rest | May 10, 2019 | Apr 22, 2019 |
| Suse | — | Upgrade freeradius-server-utilsUpgrade freeradius-server-sqliteUpgrade freeradius-server-libsUpgrade freeradius-server-krb5Upgrade freeradius-server-pythonUpgrade freeradius-server-python3Upgrade freeradius-server-postgresqlUpgrade freeradius-serverUpgrade freeradius-server-ldapUpgrade freeradius-server-develUpgrade freeradius-server-docUpgrade freeradius-server-mysqlUpgrade freeradius-server-perl | Apr 26, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade freeradius | May 2, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub