In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-develUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-perlUpgrade freeradius-doc | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-debuginfo | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade freeradius-postgresqlUpgrade python3-freeradius-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-perl-debuginfoUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-krb5-debuginfoUpgrade freeradius-utilsUpgrade freeradius-debuginfoUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-mysql-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-debugsourceUpgrade freeradius-utils-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-perlUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-rest-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-docUpgrade freeradius-utilsUpgrade python3-freeradiusUpgrade freeradius-develUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-krb5 | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-mysql-debuginfoUpgrade freeradius-develUpgrade freeradius-rest-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade python3-freeradiusUpgrade freeradius-perl-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5-debuginfoNo solution existsUpgrade freeradius-debugsourceUpgrade freeradius-perlUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-ldap-debuginfoUpgrade freeradiusUpgrade freeradius-krb5Upgrade python3-freeradius-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade python3-freeradiusUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-utilsUpgrade freeradius-ldap | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-mysqlUpgrade freeradius-server-develUpgrade freeradius-server-perlUpgrade freeradius-server-pythonUpgrade freeradius-server-postgresqlUpgrade freeradius-server-ldap-schemasUpgrade freeradius-serverUpgrade freeradius-server-docUpgrade freeradius-server-utilsUpgrade freeradius-server-sqliteUpgrade freeradius-server-libsUpgrade freeradius-server-python3Upgrade freeradius-server-ldapUpgrade freeradius-server-krb5 | Dec 28, 2022 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub