In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-debuginfo | Oct 28, 2020 | Dec 3, 2019 |
| Centos_linux | — | Upgrade freeradius-unixODBC-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perl-debuginfoUpgrade freeradius-restUpgrade freeradius-ldapUpgrade freeradius-utils-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-debuginfoUpgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-perlUpgrade freeradius-debugsourceUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-krb5-debuginfo | Apr 29, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-mysql | Oct 7, 2020 | Aug 3, 2019 |
| Redhat_linux | — | Upgrade freeradius-sqlite-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-debugsourceUpgrade freeradiusUpgrade freeradius-perl-debuginfoUpgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-perlUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-mysql-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-docUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-develUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfo | Apr 29, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade freeradius-server-ldapUpgrade freeradius-server-develUpgrade freeradius-server-krb5Upgrade freeradius-server-pythonUpgrade freeradius-server-perlUpgrade freeradius-server-docUpgrade freeradius-server-libsUpgrade freeradius-server-utilsUpgrade freeradius-server-mysqlUpgrade freeradius-server-sqliteUpgrade freeradius-serverUpgrade freeradius-server-python3Upgrade freeradius-server-postgresql | Apr 18, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub