The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-postgresqlUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-devel | May 4, 2022 | Mar 21, 2020 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-postgresqlUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-debuginfoUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-python | Oct 28, 2020 | Mar 21, 2020 |
| Centos_linux | — | Upgrade freeradius-utils-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-pythonUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-ldap-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perl-debuginfoUpgrade freeradiusUpgrade freeradius-debugsourceUpgrade python3-freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-mysql-debuginfoUpgrade freeradius-rest-debuginfoUpgrade python3-freeradiusUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perlUpgrade freeradius-mysqlUpgrade freeradius-sqlite | Oct 1, 2020 | Mar 21, 2020 |
| Debian | — | Upgrade freeradius | Jul 30, 2024 | Mar 21, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade freeradius | Nov 3, 2020 | Mar 21, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade freeradius | Sep 28, 2020 | Mar 21, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Aug 31, 2020 | Mar 21, 2020 |
| Oracle_linux | — | Upgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade python3-freeradiusUpgrade freeradius-utils | Oct 7, 2020 | Nov 14, 2019 |
| Redhat_linux | — | Upgrade freeradius-unixODBC-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-docUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysqlUpgrade python3-freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysql-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-pythonUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-debugsourceUpgrade freeradius-perl-debuginfoUpgrade python3-freeradiusUpgrade freeradius-sqlite | Oct 1, 2020 | Mar 21, 2020 |
| Rocky_linux | — | Upgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade python3-freeradiusUpgrade freeradius-develUpgrade freeradius-restUpgrade freeradius-krb5-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-perl-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-ldapUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-utils | Mar 12, 2024 | Mar 21, 2020 |
| Suse | — | Upgrade freeradius-server-krb5Upgrade freeradius-server-postgresqlUpgrade freeradius-server-perlUpgrade freeradius-server-python3Upgrade freeradius-server-sqliteUpgrade freeradius-server-mysqlUpgrade freeradius-server-develUpgrade freeradius-server-docUpgrade freeradius-serverUpgrade freeradius-server-utilsUpgrade freeradius-server-ldapUpgrade freeradius-server-libsUpgrade freeradius-server-python | Apr 18, 2020 | Mar 21, 2020 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Mar 21, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub