In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-restUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade python3-freeradiusUpgrade freeradius-sqliteUpgrade freeradius-krb5Upgrade freeradius-devel | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-debuginfo | Mar 7, 2023 | Jan 17, 2023 |
| Amazon_linux | — | Upgrade freeradius | Mar 7, 2023 | Dec 27, 2022 |
| Centos_linux | — | Upgrade freeradius-utils-debuginfoUpgrade freeradius-unixODBCUpgrade python3-freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradiusUpgrade freeradius-ldap-debuginfoUpgrade freeradius-restUpgrade python3-freeradius-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5Upgrade freeradius-perl-debuginfoUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradius-ldapUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-debugsourceUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-postgresql | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-develUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-docUpgrade freeradius-perlUpgrade python3-freeradiusUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-postgresql | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade python3-freeradiusUpgrade freeradius-debugsourceUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-perl-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-ldap-debuginfoUpgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-mysql-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradiusUpgrade freeradius-rest-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-krb5Upgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-unixODBCNo solution existsUpgrade freeradius-devel | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-restUpgrade freeradiusUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-doc | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-ldap-schemasUpgrade freeradius-server-ldapUpgrade freeradius-serverUpgrade freeradius-server-pythonUpgrade freeradius-server-perlUpgrade freeradius-server-libsUpgrade freeradius-server-docUpgrade freeradius-server-krb5Upgrade freeradius-server-sqliteUpgrade freeradius-server-mysqlUpgrade freeradius-server-postgresqlUpgrade freeradius-server-python3Upgrade freeradius-server-utilsUpgrade freeradius-server-devel | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub