A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade freeradius-ldapUpgrade freeradiusUpgrade freeradius-perlUpgrade freeradius-postgresqlUpgrade freeradius-sqliteUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade python3-freeradiusUpgrade freeradius-unixODBCUpgrade freeradius-krb5Upgrade freeradius-restUpgrade freeradius-docUpgrade freeradius-devel | May 15, 2023 | Jan 17, 2023 |
| Alpine Linux | — | Upgrade freeradius | Mar 26, 2024 | Jan 17, 2023 |
| Amazon Linux Ami 2 | — | Upgrade freeradius-unixODBCUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade freeradius-develUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-debuginfoUpgrade freeradius-perlUpgrade freeradius-docUpgrade freeradius-pythonUpgrade freeradiusUpgrade freeradius-postgresqlUpgrade freeradius-utils | Mar 7, 2023 | Jan 17, 2023 |
| Centos_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-develUpgrade freeradius-docUpgrade python3-freeradiusUpgrade python3-freeradius-debuginfoUpgrade freeradius-krb5Upgrade freeradius-debuginfoUpgrade freeradiusUpgrade freeradius-utils-debuginfoUpgrade freeradius-restUpgrade freeradius-debugsourceUpgrade freeradius-perlUpgrade freeradius-krb5-debuginfoUpgrade freeradius-rest-debuginfoUpgrade freeradius-mysqlUpgrade freeradius-utilsUpgrade freeradius-mysql-debuginfoUpgrade freeradius-ldapUpgrade freeradius-unixODBC-debuginfoUpgrade freeradius-perl-debuginfoUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-ldap-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Debian | — | Upgrade freeradius | Feb 27, 2023 | Jan 17, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade freeradius | Feb 9, 2023 | Jan 17, 2023 |
| Oracle_linux | — | Upgrade freeradius-sqliteUpgrade freeradius-utilsUpgrade freeradius-unixODBCUpgrade freeradius-postgresqlUpgrade freeradius-ldapUpgrade freeradius-restUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-develUpgrade python3-freeradiusUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-mysql | May 17, 2023 | Apr 22, 2022 |
| Redhat_linux | — | Upgrade freeradius-perl-debuginfoUpgrade freeradiusUpgrade freeradius-debugsourceUpgrade freeradius-postgresqlUpgrade freeradius-utilsUpgrade freeradius-postgresql-debuginfoUpgrade freeradius-sqliteUpgrade python3-freeradius-debuginfoUpgrade freeradius-ldapUpgrade freeradius-sqlite-debuginfoUpgrade freeradius-perlUpgrade freeradius-krb5Upgrade freeradius-ldap-debuginfoUpgrade freeradius-develUpgrade freeradius-docUpgrade freeradius-utils-debuginfoUpgrade freeradius-debuginfoUpgrade freeradius-unixODBC-debuginfoNo solution existsUpgrade freeradius-unixODBCUpgrade freeradius-krb5-debuginfoUpgrade python3-freeradiusUpgrade freeradius-mysql-debuginfoUpgrade freeradius-restUpgrade freeradius-mysqlUpgrade freeradius-rest-debuginfo | May 15, 2023 | Jan 17, 2023 |
| Rocky_linux | — | Upgrade freeradius-postgresqlUpgrade freeradius-unixODBCUpgrade freeradius-docUpgrade freeradiusUpgrade freeradius-utilsUpgrade freeradius-ldapUpgrade freeradius-sqliteUpgrade freeradius-restUpgrade freeradius-develUpgrade freeradius-mysqlUpgrade freeradius-krb5Upgrade python3-freeradiusUpgrade freeradius-perl | Jun 29, 2026 | Jun 26, 2026 |
| Suse | — | Upgrade freeradius-server-sqliteUpgrade freeradius-server-pythonUpgrade freeradius-server-ldapUpgrade freeradius-server-krb5Upgrade freeradius-serverUpgrade freeradius-server-libsUpgrade freeradius-server-mysqlUpgrade freeradius-server-docUpgrade freeradius-server-perlUpgrade freeradius-server-develUpgrade freeradius-server-ldap-schemasUpgrade freeradius-server-postgresqlUpgrade freeradius-server-utilsUpgrade freeradius-server-python3 | Dec 28, 2022 | Dec 27, 2022 |
| Ubuntu | — | Upgrade freeradiusUpgrade freeradius (Ubuntu Pro) | Jan 4, 2023 | Dec 27, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub