FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Apr 30, 2019 | Apr 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-debuginfoUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius | Apr 27, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-utils-debuginfoUpgrade freeradius-debugsourceUpgrade freeradiusUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-docUpgrade freeradius-ldap-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-ldapUpgrade freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-develUpgrade freeradius-restUpgrade freeradius-python | May 17, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradius-perl | Jul 21, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-develUpgrade freeradius-rest-debuginfoUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-restUpgrade freeradius-postgresqlUpgrade freeradius-pythonUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-docUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-sqlite | May 10, 2019 | Apr 22, 2019 |
| Suse | — | Upgrade freeradius-server-libsUpgrade freeradius-server-utilsUpgrade freeradius-server-sqliteUpgrade freeradius-server-krb5Upgrade freeradius-server-develUpgrade freeradius-server-postgresqlUpgrade freeradius-server-pythonUpgrade freeradius-server-python3Upgrade freeradius-server-docUpgrade freeradius-server-ldapUpgrade freeradius-server-mysqlUpgrade freeradius-server-perlUpgrade freeradius-server | Apr 26, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade freeradius | May 2, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub