In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-sqlite | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-mysql | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-develUpgrade python3-freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-utils-debuginfoUpgrade freeradiusUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-debugsourceUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-restUpgrade freeradius-mysql-debuginfoUpgrade freeradius-unixODBC-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-restUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade python3-freeradius | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-restUpgrade freeradius-debugsourceUpgrade freeradius-ldapUpgrade freeradius-krb5Upgrade freeradius-unixODBC-debuginfoUpgrade freeradius-perlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-ldap-debuginfoNo solution existsUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-perl-debuginfoUpgrade python3-freeradiusUpgrade freeradius-sqlite-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-mysql-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-postgresql | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-krb5Upgrade freeradius-server-sqliteUpgrade freeradius-server-python3Upgrade freeradius-server-ldapUpgrade freeradius-server-libsUpgrade freeradius-server-utilsUpgrade freeradius-server-develUpgrade freeradius-serverUpgrade freeradius-server-docUpgrade freeradius-server-postgresqlUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-pythonUpgrade freeradius-server-mysqlUpgrade freeradius-server-perl | Dec 28, 2022 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub