In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-perlUpgrade freeradius-pythonUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-postgresql | Oct 28, 2020 | Dec 3, 2019 |
| Centos_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-utils-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-debuginfoUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utilsUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-rest-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysql | Apr 29, 2020 | Dec 3, 2019 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Dec 3, 2019 |
| Oracle_linux | — | Upgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-krb5Upgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-unixODBC | Oct 7, 2020 | Aug 3, 2019 |
| Redhat_linux | — | Upgrade freeradius-utils-debuginfoUpgrade freeradius-krb5Upgrade freeradius-rest-debuginfoUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-docUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-debugsourceUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresql | Apr 29, 2020 | Dec 3, 2019 |
| Suse | — | Upgrade freeradius-server-develUpgrade freeradius-server-docUpgrade freeradius-server-ldapUpgrade freeradius-server-pythonUpgrade freeradius-server-perlUpgrade freeradius-server-krb5Upgrade freeradius-serverUpgrade freeradius-server-libsUpgrade freeradius-server-utilsUpgrade freeradius-server-postgresqlUpgrade freeradius-server-python3Upgrade freeradius-server-sqliteUpgrade freeradius-server-mysql | Apr 18, 2020 | Dec 3, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub