In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-freeradiusalma-upgrade-freeradius-develalma-upgrade-freeradius-docalma-upgrade-freeradius-krb5alma-upgrade-freeradius-ldapalma-upgrade-freeradius-mysqlalma-upgrade-freeradius-perlalma-upgrade-freeradius-postgresqlalma-upgrade-freeradius-restalma-upgrade-freeradius-sqlitealma-upgrade-freeradius-unixodbcalma-upgrade-freeradius-utilsalma-upgrade-python3-freeradius | May 15, 2023 | Jan 17, 2023 | |
| Alpine Linux | alpine-linux-upgrade-freeradius | Mar 26, 2024 | Jan 17, 2023 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-freeradiusamazon-linux-ami-2-upgrade-freeradius-debuginfoamazon-linux-ami-2-upgrade-freeradius-develamazon-linux-ami-2-upgrade-freeradius-docamazon-linux-ami-2-upgrade-freeradius-krb5amazon-linux-ami-2-upgrade-freeradius-ldapamazon-linux-ami-2-upgrade-freeradius-mysqlamazon-linux-ami-2-upgrade-freeradius-perlamazon-linux-ami-2-upgrade-freeradius-postgresqlamazon-linux-ami-2-upgrade-freeradius-pythonamazon-linux-ami-2-upgrade-freeradius-sqliteamazon-linux-ami-2-upgrade-freeradius-unixodbcamazon-linux-ami-2-upgrade-freeradius-utils | Mar 7, 2023 | Jan 17, 2023 | |
| Centos_linux | — | centos-upgrade-freeradiuscentos-upgrade-freeradius-debuginfocentos-upgrade-freeradius-debugsourcecentos-upgrade-freeradius-develcentos-upgrade-freeradius-doccentos-upgrade-freeradius-krb5centos-upgrade-freeradius-krb5-debuginfocentos-upgrade-freeradius-ldapcentos-upgrade-freeradius-ldap-debuginfocentos-upgrade-freeradius-mysqlcentos-upgrade-freeradius-mysql-debuginfocentos-upgrade-freeradius-perlcentos-upgrade-freeradius-perl-debuginfocentos-upgrade-freeradius-postgresqlcentos-upgrade-freeradius-postgresql-debuginfocentos-upgrade-freeradius-restcentos-upgrade-freeradius-rest-debuginfocentos-upgrade-freeradius-sqlitecentos-upgrade-freeradius-sqlite-debuginfocentos-upgrade-freeradius-unixodbccentos-upgrade-freeradius-unixodbc-debuginfocentos-upgrade-freeradius-utilscentos-upgrade-freeradius-utils-debuginfocentos-upgrade-python3-freeradiuscentos-upgrade-python3-freeradius-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | debian-upgrade-freeradius | Feb 27, 2023 | Jan 17, 2023 | |
| Oracle_linux | — | oracle-linux-upgrade-freeradiusoracle-linux-upgrade-freeradius-develoracle-linux-upgrade-freeradius-docoracle-linux-upgrade-freeradius-krb5oracle-linux-upgrade-freeradius-ldaporacle-linux-upgrade-freeradius-mysqloracle-linux-upgrade-freeradius-perloracle-linux-upgrade-freeradius-postgresqloracle-linux-upgrade-freeradius-restoracle-linux-upgrade-freeradius-sqliteoracle-linux-upgrade-freeradius-unixodbcoracle-linux-upgrade-freeradius-utilsoracle-linux-upgrade-python3-freeradius | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | redhat-upgrade-freeradiusredhat-upgrade-freeradius-debuginforedhat-upgrade-freeradius-debugsourceredhat-upgrade-freeradius-develredhat-upgrade-freeradius-docredhat-upgrade-freeradius-krb5redhat-upgrade-freeradius-krb5-debuginforedhat-upgrade-freeradius-ldapredhat-upgrade-freeradius-ldap-debuginforedhat-upgrade-freeradius-mysqlredhat-upgrade-freeradius-mysql-debuginforedhat-upgrade-freeradius-perlredhat-upgrade-freeradius-perl-debuginforedhat-upgrade-freeradius-postgresqlredhat-upgrade-freeradius-postgresql-debuginforedhat-upgrade-freeradius-restredhat-upgrade-freeradius-rest-debuginforedhat-upgrade-freeradius-sqliteredhat-upgrade-freeradius-sqlite-debuginforedhat-upgrade-freeradius-unixodbcredhat-upgrade-freeradius-unixodbc-debuginforedhat-upgrade-freeradius-utilsredhat-upgrade-freeradius-utils-debuginforedhat-upgrade-python3-freeradiusredhat-upgrade-python3-freeradius-debuginfo | May 15, 2023 | Jan 17, 2023 | |
| Rocky_linux | rocky-upgrade-freeradiusrocky-upgrade-freeradius-develrocky-upgrade-freeradius-docrocky-upgrade-freeradius-krb5rocky-upgrade-freeradius-ldaprocky-upgrade-freeradius-mysqlrocky-upgrade-freeradius-perlrocky-upgrade-freeradius-postgresqlrocky-upgrade-freeradius-restrocky-upgrade-freeradius-sqliterocky-upgrade-freeradius-unixodbcrocky-upgrade-freeradius-utilsrocky-upgrade-python3-freeradius | Jun 29, 2026 | Jun 26, 2026 | |
| Suse | — | suse-upgrade-freeradius-serversuse-upgrade-freeradius-server-develsuse-upgrade-freeradius-server-docsuse-upgrade-freeradius-server-krb5suse-upgrade-freeradius-server-ldapsuse-upgrade-freeradius-server-ldap-schemassuse-upgrade-freeradius-server-libssuse-upgrade-freeradius-server-mysqlsuse-upgrade-freeradius-server-perlsuse-upgrade-freeradius-server-postgresqlsuse-upgrade-freeradius-server-pythonsuse-upgrade-freeradius-server-python3suse-upgrade-freeradius-server-sqlitesuse-upgrade-freeradius-server-utils | Dec 28, 2022 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub