In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-sqliteUpgrade freeradius-devel | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-pythonUpgrade freeradius-develUpgrade freeradius-postgresql | Mar 7, 2023 | Jan 17, 2023 |
| Amazon_linux | — | Upgrade freeradius | Mar 7, 2023 | Dec 27, 2022 |
| Centos_linux | — | Upgrade freeradius-debuginfoUpgrade freeradius-perlUpgrade freeradius-rest-debuginfoUpgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-debugsourceUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-ldapUpgrade freeradius-ldap-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradius-utils-debuginfoUpgrade freeradius-krb5Upgrade freeradius-docUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade python3-freeradiusUpgrade freeradius-mysql-debuginfoUpgrade freeradiusUpgrade python3-freeradius-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-krb5Upgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-unixODBC | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-ldap-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradiusUpgrade freeradius-debugsourceUpgrade python3-freeradiusUpgrade freeradius-utilsUpgrade freeradius-rest-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-perl-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-debuginfoNo solution existsUpgrade freeradius-unixODBCUpgrade freeradius-utils-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-krb5 | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-docUpgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-unixODBC | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-ldapUpgrade freeradius-server-pythonUpgrade freeradius-serverUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-utilsUpgrade freeradius-server-python3Upgrade freeradius-server-mysqlUpgrade freeradius-server-develUpgrade freeradius-server-krb5Upgrade freeradius-server-postgresqlUpgrade freeradius-server-perlUpgrade freeradius-server-sqliteUpgrade freeradius-server-libsUpgrade freeradius-server-doc | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradius (Ubuntu Pro)Upgrade freeradius | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub