FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Apr 30, 2019 | Apr 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-doc | Apr 27, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade freeradius-utils-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-debugsourceUpgrade freeradius-rest-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-pythonUpgrade freeradius-krb5-debuginfoUpgrade freeradius-develUpgrade freeradius-perlUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-restUpgrade freeradius-postgresql-debuginfo | May 17, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-utils | Jul 21, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade freeradius-postgresql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-perl-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldapUpgrade freeradius-restUpgrade freeradius-pythonUpgrade freeradius-utils-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysql-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradiusUpgrade freeradius-debugsourceUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-devel | May 10, 2019 | Apr 22, 2019 |
| Suse | — | Upgrade freeradius-server-perlUpgrade freeradius-server-postgresqlUpgrade freeradius-server-mysqlUpgrade freeradius-server-docUpgrade freeradius-server-develUpgrade freeradius-server-python3Upgrade freeradius-server-ldapUpgrade freeradius-serverUpgrade freeradius-server-pythonUpgrade freeradius-server-krb5Upgrade freeradius-server-sqliteUpgrade freeradius-server-utilsUpgrade freeradius-server-libs | Apr 26, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade freeradius | May 2, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub