In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradius-krb5Upgrade freeradius-sqliteUpgrade freeradius-devel | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-ldapUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-perl | Mar 7, 2023 | Jan 17, 2023 |
| Amazon_linux | — | Upgrade freeradius | Mar 7, 2023 | Dec 27, 2022 |
| Centos_linux | — | Upgrade freeradius-ldap-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-mysql-debuginfoUpgrade freeradiusUpgrade freeradius-utils-debuginfoUpgrade python3-freeradius-debuginfoUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-rest-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-ldapUpgrade freeradius-debugsource | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-utils-debuginfoNo solution existsUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-krb5Upgrade freeradius-debuginfoUpgrade freeradius-perlUpgrade freeradius-perl-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restUpgrade freeradius-rest-debuginfoUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade python3-freeradius-debuginfoUpgrade python3-freeradiusUpgrade freeradius-mysql-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-krb5Upgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-develUpgrade freeradius-postgresql | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-develUpgrade freeradius-server-libsUpgrade freeradius-server-mysqlUpgrade freeradius-server-docUpgrade freeradius-server-postgresqlUpgrade freeradius-server-perlUpgrade freeradius-server-sqliteUpgrade freeradius-server-krb5Upgrade freeradius-server-python3Upgrade freeradius-server-utilsUpgrade freeradius-server-pythonUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-ldapUpgrade freeradius-server | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub