FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade freeradius | Apr 30, 2019 | Apr 21, 2019 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-krb5 | Apr 27, 2020 | Apr 22, 2019 |
| Centos_linux | — | Upgrade freeradius-sqlite-debuginfoUpgrade freeradiusUpgrade freeradius-mysql-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-debugsourceUpgrade freeradius-docUpgrade freeradius-rest-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-pythonUpgrade freeradius-restUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-develUpgrade freeradius-perl-debuginfoUpgrade freeradius-perl | May 17, 2019 | Apr 22, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade freeradius | May 30, 2019 | Apr 22, 2019 |
| Oracle_linux | — | Upgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-utils | Jul 21, 2020 | Apr 10, 2019 |
| Redhat_linux | — | Upgrade freeradius-krb5Upgrade freeradius-ldap-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-develUpgrade freeradius-krb5-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-perl-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-restUpgrade freeradius-pythonUpgrade freeradius-utils-debuginfo | May 10, 2019 | Apr 22, 2019 |
| Suse | — | Upgrade freeradius-server-mysqlUpgrade freeradius-server-python3Upgrade freeradius-server-postgresqlUpgrade freeradius-server-pythonUpgrade freeradius-server-develUpgrade freeradius-server-ldapUpgrade freeradius-serverUpgrade freeradius-server-docUpgrade freeradius-server-perlUpgrade freeradius-server-krb5Upgrade freeradius-server-sqliteUpgrade freeradius-server-utilsUpgrade freeradius-server-libs | Apr 26, 2019 | Apr 22, 2019 |
| Ubuntu | — | Upgrade freeradius | May 2, 2019 | Apr 22, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub