In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradius-develUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-doc | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-pythonUpgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-perl | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade freeradius-debuginfoUpgrade freeradius-ldapUpgrade python3-freeradius-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perl-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-krb5-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-mysql-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-rest-debuginfoUpgrade freeradius-perlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradiusUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-rest | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Oracle_linux | — | oracle-linux-upgrade-freeradiusoracle-linux-upgrade-freeradius-develoracle-linux-upgrade-freeradius-docoracle-linux-upgrade-freeradius-krb5oracle-linux-upgrade-freeradius-ldaporacle-linux-upgrade-freeradius-mysqloracle-linux-upgrade-freeradius-perloracle-linux-upgrade-freeradius-postgresqloracle-linux-upgrade-freeradius-restoracle-linux-upgrade-freeradius-sqliteoracle-linux-upgrade-freeradius-unixodbcoracle-linux-upgrade-freeradius-utilsoracle-linux-upgrade-python3-freeradius | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-rest-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-mysqlUpgrade python3-freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfoNo solution existsUpgrade python3-freeradius-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-restUpgrade freeradius-perl-debuginfoUpgrade freeradius-krb5Upgrade freeradius-debugsourceUpgrade freeradius-unixODBC-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | rocky-upgrade-freeradiusrocky-upgrade-freeradius-develrocky-upgrade-freeradius-docrocky-upgrade-freeradius-krb5rocky-upgrade-freeradius-ldaprocky-upgrade-freeradius-mysqlrocky-upgrade-freeradius-perlrocky-upgrade-freeradius-postgresqlrocky-upgrade-freeradius-restrocky-upgrade-freeradius-sqliterocky-upgrade-freeradius-unixodbcrocky-upgrade-freeradius-utilsrocky-upgrade-python3-freeradius | Jun 29, 2026 | Jun 26, 2026 | |
| Suse | — | suse-upgrade-freeradius-serversuse-upgrade-freeradius-server-develsuse-upgrade-freeradius-server-docsuse-upgrade-freeradius-server-krb5suse-upgrade-freeradius-server-ldapsuse-upgrade-freeradius-server-ldap-schemassuse-upgrade-freeradius-server-libssuse-upgrade-freeradius-server-mysqlsuse-upgrade-freeradius-server-perlsuse-upgrade-freeradius-server-postgresqlsuse-upgrade-freeradius-server-pythonsuse-upgrade-freeradius-server-python3suse-upgrade-freeradius-server-sqlitesuse-upgrade-freeradius-server-utils | Dec 28, 2022 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub