A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-doc | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-pythonUpgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-krb5Upgrade freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade freeradius-mysql | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade freeradius-debugsourceUpgrade freeradius-utils-debuginfoUpgrade freeradius-perlUpgrade freeradius-debuginfoUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-krb5-debuginfoUpgrade freeradius-rest-debuginfoUpgrade python3-freeradius-debuginfoUpgrade python3-freeradiusUpgrade freeradius-restUpgrade freeradius-mysqlUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-perl-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-mysql-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradius-develUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-unixODBCUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-utils | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-perlUpgrade freeradius-sqliteUpgrade freeradiusUpgrade python3-freeradius-debuginfoUpgrade freeradius-utilsUpgrade freeradius-debugsourceUpgrade freeradius-ldapUpgrade freeradius-perl-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-restUpgrade freeradius-mysqlUpgrade freeradius-docUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-rest-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-krb5-debuginfoNo solution existsUpgrade freeradius-develUpgrade python3-freeradiusUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-utils-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-devel | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-sqliteUpgrade freeradius-server-pythonUpgrade freeradius-server-ldapUpgrade freeradius-server-krb5Upgrade freeradius-serverUpgrade freeradius-server-libsUpgrade freeradius-server-perlUpgrade freeradius-server-mysqlUpgrade freeradius-server-postgresqlUpgrade freeradius-server-docUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-python3Upgrade freeradius-server-develUpgrade freeradius-server-utils | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub