A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-unixODBC | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-perlUpgrade freeradius-utilsUpgrade freeradius-pythonUpgrade freeradius-doc | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade freeradius-postgresql-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-perl-debuginfoUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-sqliteUpgrade freeradius-krb5Upgrade python3-freeradius-debuginfoUpgrade freeradius-docUpgrade freeradius-develUpgrade freeradius-krb5-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-debugsourceUpgrade freeradius-utils-debuginfoUpgrade freeradiusUpgrade python3-freeradius | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-restUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-perlUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-unixODBC-debuginfoUpgrade freeradius-unixODBCNo solution existsUpgrade freeradius-restUpgrade freeradius-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-develUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-docUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-ldap-debuginfoUpgrade freeradiusUpgrade freeradius-perl-debuginfoUpgrade freeradius-perlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade python3-freeradius-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresql | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-restUpgrade freeradius-ldap | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-utilsUpgrade freeradius-server-python3Upgrade freeradius-server-docUpgrade freeradius-server-perlUpgrade freeradius-server-develUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-postgresqlUpgrade freeradius-server-mysqlUpgrade freeradius-server-sqliteUpgrade freeradius-server-libsUpgrade freeradius-server-krb5Upgrade freeradius-server-pythonUpgrade freeradius-server-ldapUpgrade freeradius-server | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradius (Ubuntu Pro)Upgrade freeradius | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub