In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-perlUpgrade freeradiusUpgrade python3-freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-rest | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-devel | Mar 7, 2023 | Jan 17, 2023 |
| Amazon_linux | — | Upgrade freeradius | Mar 7, 2023 | Dec 27, 2022 |
| Centos_linux | — | Upgrade freeradius-docUpgrade freeradius-krb5-debuginfoUpgrade python3-freeradiusUpgrade freeradius-ldap-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5Upgrade python3-freeradius-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-restUpgrade freeradius-develUpgrade freeradius-utilsUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-ldapUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-debugsource | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-perlUpgrade freeradius-restUpgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-devel | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5Upgrade freeradius-develNo solution existsUpgrade freeradius-restUpgrade freeradius-rest-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-krb5-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradiusUpgrade freeradius-debugsourceUpgrade python3-freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-doc | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-develUpgrade freeradius-perlUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-mysql | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-libsUpgrade freeradius-server-docUpgrade freeradius-server-mysqlUpgrade freeradius-server-develUpgrade freeradius-server-python3Upgrade freeradius-server-perlUpgrade freeradius-server-sqliteUpgrade freeradius-server-krb5Upgrade freeradius-server-postgresqlUpgrade freeradius-server-utilsUpgrade freeradius-server-pythonUpgrade freeradius-serverUpgrade freeradius-server-ldapUpgrade freeradius-server-ldap-schemas | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub