In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradius-mysql | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-pythonUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-postgresql | Mar 7, 2023 | Jan 17, 2023 |
| Amazon_linux | — | Upgrade freeradius | Mar 7, 2023 | Dec 27, 2022 |
| Centos_linux | — | Upgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-debugsourceUpgrade freeradius-rest-debuginfoUpgrade freeradius-develUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-debuginfoUpgrade freeradius-perlUpgrade freeradius-ldapUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradiusUpgrade python3-freeradius-debuginfoUpgrade python3-freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5Upgrade freeradius-mysql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-doc | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-restUpgrade freeradius-krb5 | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-utilsUpgrade python3-freeradius-debuginfoUpgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-rest-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-utils-debuginfoUpgrade freeradius-develNo solution existsUpgrade freeradius-krb5Upgrade freeradius-ldapUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-restUpgrade freeradiusUpgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-devel | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-pythonUpgrade freeradius-server-ldapUpgrade freeradius-server-ldap-schemasUpgrade freeradius-serverUpgrade freeradius-server-develUpgrade freeradius-server-postgresqlUpgrade freeradius-server-utilsUpgrade freeradius-server-sqliteUpgrade freeradius-server-perlUpgrade freeradius-server-krb5Upgrade freeradius-server-docUpgrade freeradius-server-python3Upgrade freeradius-server-libsUpgrade freeradius-server-mysql | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradius (Ubuntu Pro)Upgrade freeradius | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub