Lucene search
PRIOn knowledge basePRION:CVE-2022-41860HistoryJan 17, 2023 - 6:15 p.m.
Null pointer dereference
2023-01-1718:15:00
PRIOn knowledge base
www.prio-n.com
9
freeradius
eap-sim
supplicant
unknown sim option
internal dictionaries
null pointer
dereference
server crash
In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freeradius | ge | 0.9.3 | |
| freeradius | le | 3.0.25 |
Related
redhatcve
redhatcve
CVE-2022-41860
2022-12-07 17:01:21
cvelist
cvelist
CVE-2022-41860
2023-01-17 00:00:00
cve
cve
CVE-2022-41860
2023-01-17 18:15:11
alpinelinux
alpinelinux
CVE-2022-41860
2023-01-17 18:15:11
amazon
amazon
Medium: freeradius
2023-03-02 20:22:00
Medium: freeradius
2023-03-02 21:50:00
debiancve
debiancve
CVE-2022-41860
2023-01-17 18:15:11
ubuntucve
ubuntucve
CVE-2022-41860
2022-12-14 00:00:00
nessus
nessus
Amazon Linux AMI : freeradius (ALAS-2023-1699)
2023-03-07 00:00:00
EulerOS 2.0 SP8 : freeradius (EulerOS-SA-2023-1312)
2023-02-08 00:00:00
RHEL 9 : freeradius (RHSA-2023:2166)
2023-05-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41860 affecting package freeradius for versions less than 3.2.3-1
2023-10-11 03:02:00
veracode
veracode
Denial Of Service (DoS)
2023-03-12 08:48:40
osv
osv
CVE-2022-41860
2023-01-17 18:15:11
Moderate: freeradius security and bug fix update
2023-05-09 00:00:00
freeradius - security update
2023-02-24 00:00:00
nvd
nvd
CVE-2022-41860
2023-01-17 18:15:11
openvas
openvas
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2023-1312)
2023-02-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0135-1)
2023-01-26 00:00:00
Debian: Security Advisory (DLA-3342-1)
2023-02-25 00:00:00
debian
debian
[SECURITY] [DLA 3342-1] freeradius security update
2023-02-24 16:29:58
redhat
redhat
(RHSA-2023:2166) Moderate: freeradius security and bug fix update
2023-05-09 05:02:09
(RHSA-2023:2870) Moderate: freeradius:3.0 security update
2023-05-16 05:57:04
fedora
fedora
[SECURITY] Fedora 36 Update: freeradius-3.0.26-1.fc36
2022-12-16 01:43:43
mageia
mageia
Updated freeradius packages fix security vulnerability
2022-12-31 01:39:00
almalinux
almalinux
Moderate: freeradius:3.0 security update
2023-05-16 00:00:00
Moderate: freeradius security and bug fix update
2023-05-09 00:00:00
oraclelinux
oraclelinux
freeradius:3.0 security update
2023-05-24 00:00:00
freeradius security and bug fix update
2023-05-15 00:00:00
ubuntu
ubuntu
FreeRADIUS vulnerabilities
2023-01-04 00:00:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00