In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-utils | Oct 28, 2020 | Dec 3, 2019 |
| Centos_linux | — | Upgrade freeradius-rest-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-mysqlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-docUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-utils-debuginfo | Apr 29, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius | Oct 7, 2020 | Aug 3, 2019 |
| Redhat_linux | — | Upgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-mysql-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-utils-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-docUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-ldapUpgrade freeradius-debugsourceUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-unixODBC | Apr 29, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade freeradius-server-postgresqlUpgrade freeradius-serverUpgrade freeradius-server-utilsUpgrade freeradius-server-sqliteUpgrade freeradius-server-libsUpgrade freeradius-server-python3Upgrade freeradius-server-mysqlUpgrade freeradius-server-perlUpgrade freeradius-server-krb5Upgrade freeradius-server-pythonUpgrade freeradius-server-docUpgrade freeradius-server-ldapUpgrade freeradius-server-devel | Apr 18, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub