In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradius-postgresqlUpgrade freeradius-perl | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradiusUpgrade freeradius-docUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-pythonUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-debuginfo | Mar 7, 2023 | Jan 17, 2023 |
| Amazon_linux | — | Upgrade freeradius | Mar 7, 2023 | Dec 27, 2022 |
| Centos_linux | — | Upgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade python3-freeradius-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-sqlite-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-ldap-debuginfoUpgrade freeradius-debugsourceUpgrade python3-freeradius-debuginfoUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-krb5-debuginfoUpgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5Upgrade freeradius-utils-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-unixODBC-debuginfoNo solution existsUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-ldap | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-develUpgrade freeradius-perl | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-postgresqlUpgrade freeradius-server-develUpgrade freeradius-server-krb5Upgrade freeradius-server-utilsUpgrade freeradius-server-python3Upgrade freeradius-server-mysqlUpgrade freeradius-server-sqliteUpgrade freeradius-server-docUpgrade freeradius-server-perlUpgrade freeradius-server-libsUpgrade freeradius-server-pythonUpgrade freeradius-serverUpgrade freeradius-server-ldapUpgrade freeradius-server-ldap-schemas | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub