A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-develUpgrade freeradius-krb5Upgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradius-restUpgrade python3-freeradiusUpgrade freeradius-ldapUpgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-docUpgrade freeradius-pythonUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-debuginfo | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade freeradius-restUpgrade freeradius-rest-debuginfoUpgrade python3-freeradius-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade python3-freeradiusUpgrade freeradiusUpgrade freeradius-krb5Upgrade freeradius-debuginfoUpgrade freeradius-debugsourceUpgrade freeradius-perlUpgrade freeradius-utils-debuginfoUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-sqliteUpgrade freeradius-ldap-debuginfoUpgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius-mysql-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-ldapUpgrade freeradius-utilsUpgrade freeradius-mysqlUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-perl-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-ldapUpgrade freeradius-unixODBCUpgrade freeradius-utilsUpgrade freeradius-restUpgrade freeradius-sqliteUpgrade freeradius-postgresqlUpgrade freeradius-mysqlUpgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradiusUpgrade freeradius-devel | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-mysqlUpgrade freeradius-unixODBCUpgrade freeradius-mysql-debuginfoUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-krb5-debuginfoUpgrade freeradius-restNo solution existsUpgrade freeradius-krb5Upgrade freeradius-rest-debuginfoUpgrade freeradius-docUpgrade python3-freeradiusUpgrade freeradius-develUpgrade freeradius-ldap-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-utils-debuginfoUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradiusUpgrade python3-freeradius-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-utilsUpgrade freeradius-sqliteUpgrade freeradius-ldapUpgrade freeradius-debugsourceUpgrade freeradius-perl-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-docUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradiusUpgrade freeradius-ldapUpgrade python3-freeradiusUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-mysqlUpgrade freeradius-develUpgrade freeradius-sqliteUpgrade freeradius-rest | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-sqliteUpgrade freeradius-server-libsUpgrade freeradius-server-ldapUpgrade freeradius-server-pythonUpgrade freeradius-server-krb5Upgrade freeradius-serverUpgrade freeradius-server-python3Upgrade freeradius-server-utilsUpgrade freeradius-server-perlUpgrade freeradius-server-docUpgrade freeradius-server-mysqlUpgrade freeradius-server-develUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-postgresql | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradius (Ubuntu Pro)Upgrade freeradius | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub