Name: CVE-2022-41861: Uncontrolled Resource Consumption
Creator: Rapid7
Published: 2023-01-17T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-41861, CWE-400, CWE-20, CVSS 6.5, EPSS 0.01112

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-ldapUpgrade freeradius-docUpgrade freeradius-develUpgrade freeradius-unixODBCUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-rest	May 15, 2023	Jan 17, 2023
Alpine Linux	—	Upgrade freeradius	Mar 26, 2024	Jan 17, 2023
Amazon Linux Ami 2	—	Upgrade freeradius-docUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-pythonUpgrade freeradius-sqliteUpgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-krb5Upgrade freeradius-devel	Mar 7, 2023	Jan 17, 2023
Centos_linux	—	Upgrade freeradius-utils-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-sqliteUpgrade python3-freeradius-debuginfoUpgrade freeradius-develUpgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-mysqlUpgrade freeradius-ldapUpgrade freeradius-perl-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utilsUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldap-debuginfoUpgrade freeradius-postgresql	May 15, 2023	Jan 17, 2023
Debian	—	Upgrade freeradius	Feb 27, 2023	Jan 17, 2023
Huawei Euleros 2_0_sp8	—	Upgrade freeradius	Feb 9, 2023	Jan 17, 2023
Oracle_linux	—	Upgrade freeradius-krb5Upgrade freeradius-perlUpgrade freeradiusUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradius-unixODBCUpgrade freeradius-sqliteUpgrade freeradius-restUpgrade freeradius-utilsUpgrade freeradius-postgresqlUpgrade freeradius-ldap	May 17, 2023	Apr 22, 2022
Redhat_linux	—	Upgrade freeradius-debuginfoUpgrade freeradius-unixODBCUpgrade python3-freeradiusUpgrade freeradius-utils-debuginfoUpgrade freeradius-docUpgrade freeradius-krb5-debuginfoUpgrade freeradius-mysql-debuginfoUpgrade freeradius-krb5Upgrade freeradius-unixODBC-debuginfoUpgrade freeradius-restNo solution existsUpgrade freeradius-develUpgrade freeradius-ldap-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-rest-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-utilsUpgrade freeradius-postgresql-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradiusUpgrade freeradius-sqliteUpgrade freeradius-perl-debuginfoUpgrade freeradius-ldapUpgrade freeradius-perlUpgrade freeradius-postgresql	May 15, 2023	Jan 17, 2023
Rocky_linux	—	Upgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-restUpgrade freeradius-develUpgrade python3-freeradiusUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-perl	Jun 29, 2026	Jun 26, 2026
Suse	—	Upgrade freeradius-server-krb5Upgrade freeradius-serverUpgrade freeradius-server-libsUpgrade freeradius-server-ldapUpgrade freeradius-server-pythonUpgrade freeradius-server-sqliteUpgrade freeradius-server-mysqlUpgrade freeradius-server-develUpgrade freeradius-server-python3Upgrade freeradius-server-postgresqlUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-utilsUpgrade freeradius-server-perlUpgrade freeradius-server-doc	Dec 28, 2022	Dec 27, 2022
Ubuntu	—	Upgrade freeradius (Ubuntu Pro)Upgrade freeradius	Jan 4, 2023	Dec 27, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence