In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-utils | Oct 28, 2020 | Dec 3, 2019 |
| Centos_linux | — | Upgrade freeradius-ldap-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-rest-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-utils-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-develUpgrade freeradius-debuginfoUpgrade freeradius-ldapUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-sqlite-debuginfo | Apr 29, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-pythonUpgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-ldap | Oct 7, 2020 | Aug 3, 2019 |
| Redhat_linux | — | Upgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-mysql-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-rest-debuginfoUpgrade freeradius-docUpgrade freeradius-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-debugsourceUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-perl-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-python | Apr 29, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade freeradius-server-sqliteUpgrade freeradius-server-mysqlUpgrade freeradius-server-libsUpgrade freeradius-server-utilsUpgrade freeradius-server-python3Upgrade freeradius-serverUpgrade freeradius-server-postgresqlUpgrade freeradius-server-develUpgrade freeradius-server-docUpgrade freeradius-server-krb5Upgrade freeradius-server-perlUpgrade freeradius-server-ldapUpgrade freeradius-server-python | Apr 18, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub