A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-develUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-postgresql | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-doc | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade python3-freeradiusUpgrade python3-freeradius-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-restUpgrade freeradius-rest-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-utils-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utilsUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-unixODBC | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-perl | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-perlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-ldapUpgrade freeradius-perl-debuginfoUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-sqlite-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-debugsourceUpgrade freeradius-utils-debuginfoUpgrade freeradius-develUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade python3-freeradiusUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-rest-debuginfoNo solution existsUpgrade freeradius-restUpgrade freeradius-docUpgrade freeradius-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-develUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-perl | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-ldapUpgrade freeradius-server-pythonUpgrade freeradius-server-libsUpgrade freeradius-server-krb5Upgrade freeradius-server-sqliteUpgrade freeradius-serverUpgrade freeradius-server-docUpgrade freeradius-server-postgresqlUpgrade freeradius-server-develUpgrade freeradius-server-perlUpgrade freeradius-server-utilsUpgrade freeradius-server-python3Upgrade freeradius-server-mysqlUpgrade freeradius-server-ldap-schemas | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub