Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2023:2870
HistoryMay 16, 2023 - 5:57 a.m.

(RHSA-2023:2870) Moderate: freeradius:3.0 security update

2023-05-1605:57:04
access.redhat.com
9
moderate
freeradius
information leakage
eap-pwd
eap-sim
binary data
cve-2022-41859
cve-2022-41860
cve-2022-41861
red hat enterprise linux 8.8
release notes

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.7%

JSON

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

  • freeradius: Information leakage in EAP-PWD (CVE-2022-41859)

  • freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)

  • freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

OSVersionArchitecturePackageVersionFilename
RedHatanys390xfreeradius< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-3.0.20-14.module+el8.8.0+17558+3f8a93b9.s390x.rpm
RedHatanyx86_64freeradius-debuginfo< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-debuginfo-3.0.20-14.module+el8.8.0+17558+3f8a93b9.x86_64.rpm
RedHatanyx86_64freeradius-postgresql-debuginfo< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-postgresql-debuginfo-3.0.20-14.module+el8.8.0+17558+3f8a93b9.x86_64.rpm
RedHatanys390xfreeradius-debugsource< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-debugsource-3.0.20-14.module+el8.8.0+17558+3f8a93b9.s390x.rpm
RedHatanyx86_64freeradius-sqlite-debuginfo< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-sqlite-debuginfo-3.0.20-14.module+el8.8.0+17558+3f8a93b9.x86_64.rpm
RedHatanyppc64lepython3-freeradius< 3.0.20-14.module+el8.8.0+17558+3f8a93b9python3-freeradius-3.0.20-14.module+el8.8.0+17558+3f8a93b9.ppc64le.rpm
RedHatanyppc64lefreeradius-rest< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-rest-3.0.20-14.module+el8.8.0+17558+3f8a93b9.ppc64le.rpm
RedHatanyx86_64freeradius-perl-debuginfo< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-perl-debuginfo-3.0.20-14.module+el8.8.0+17558+3f8a93b9.x86_64.rpm
RedHatanys390xfreeradius-rest-debuginfo< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-rest-debuginfo-3.0.20-14.module+el8.8.0+17558+3f8a93b9.s390x.rpm
RedHatanys390xfreeradius-doc< 3.0.20-14.module+el8.8.0+17558+3f8a93b9freeradius-doc-3.0.20-14.module+el8.8.0+17558+3f8a93b9.s390x.rpm
Rows per page:
1-10 of 1001

Related

nessus 21
redhat 1
debian 1
oraclelinux 2
openvas 11
mageia 1
osv 7
amazon 2
almalinux 2
fedora 1
ubuntu 1
redhatcve 3
cve 3
veracode 3
nvd 3
alpinelinux 3
ubuntucve 3
cvelist 3
cbl_mariner 2
debiancve 3
prion 3
ics 1
nessus
nessus
RHEL 9 : freeradius (RHSA-2023:2166)
2023-05-12 00:00:00
AlmaLinux 9 : freeradius (ALSA-2023:2166)
2023-05-14 00:00:00
Oracle Linux 9 : freeradius (ELSA-2023-2166)
2023-05-15 00:00:00
redhat
redhat
(RHSA-2023:2166) Moderate: freeradius security and bug fix update
2023-05-09 05:02:09
debian
debian
[SECURITY] [DLA 3342-1] freeradius security update
2023-02-24 16:29:58
oraclelinux
oraclelinux
freeradius:3.0 security update
2023-05-24 00:00:00
freeradius security and bug fix update
2023-05-15 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0124-1)
2023-01-24 00:00:00
Fedora: Security Advisory for freeradius (FEDORA-2022-98832b2cc2)
2022-12-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4622-1)
2022-12-28 00:00:00
mageia
mageia
Updated freeradius packages fix security vulnerability
2022-12-31 01:39:00
osv
osv
freeradius - security update
2023-02-24 00:00:00
Moderate: freeradius:3.0 security update
2023-05-16 00:00:00
Moderate: freeradius security and bug fix update
2023-05-09 00:00:00
amazon
amazon
Medium: freeradius
2023-03-02 21:50:00
Medium: freeradius
2023-03-02 20:22:00
almalinux
almalinux
Moderate: freeradius:3.0 security update
2023-05-16 00:00:00
Moderate: freeradius security and bug fix update
2023-05-09 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: freeradius-3.0.26-1.fc36
2022-12-16 01:43:43
ubuntu
ubuntu
FreeRADIUS vulnerabilities
2023-01-04 00:00:00
redhatcve
redhatcve
CVE-2022-41860
2022-12-07 17:01:21
CVE-2022-41861
2022-12-07 17:31:23
CVE-2022-41859
2022-12-07 17:01:21
cve
cve
CVE-2022-41861
2023-01-17 18:15:11
CVE-2022-41859
2023-01-17 18:15:11
CVE-2022-41860
2023-01-17 18:15:11
veracode
veracode
Denial Of Service (DoS)
2023-03-12 08:48:38
Information Disclosure
2023-03-12 08:47:02
Denial Of Service (DoS)
2023-03-12 08:48:40
nvd
nvd
CVE-2022-41859
2023-01-17 18:15:11
CVE-2022-41861
2023-01-17 18:15:11
CVE-2022-41860
2023-01-17 18:15:11
alpinelinux
alpinelinux
CVE-2022-41859
2023-01-17 18:15:11
CVE-2022-41861
2023-01-17 18:15:11
CVE-2022-41860
2023-01-17 18:15:11
ubuntucve
ubuntucve
CVE-2022-41859
2023-01-17 00:00:00
CVE-2022-41861
2022-12-14 00:00:00
CVE-2022-41860
2022-12-14 00:00:00
cvelist
cvelist
CVE-2022-41861
2023-01-17 00:00:00
CVE-2022-41860
2023-01-17 00:00:00
CVE-2022-41859
2023-01-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2022-41861 affecting package freeradius for versions less than 3.2.3-1
2023-10-11 03:02:00
CVE-2022-41860 affecting package freeradius for versions less than 3.2.3-1
2023-10-11 03:02:00
debiancve
debiancve
CVE-2022-41861
2023-01-17 18:15:11
CVE-2022-41859
2023-01-17 18:15:11
CVE-2022-41860
2023-01-17 18:15:11
prion
prion
Design/Logic Flaw
2023-01-17 18:15:00
Null pointer dereference
2023-01-17 18:15:00
Information disclosure
2023-01-17 18:15:00
ics
ics
Siemens SCALANCE XCM-/XRM-300
2024-02-15 12:00:00

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.7%

JSON
Related for RHSA-2023:2870
nessus21redhat1debian1oraclelinux2openvas11mageia1osv7amazon2almalinux2fedora1ubuntu1redhatcve3cve3veracode3nvd3alpinelinux3ubuntucve3cvelist3cbl_mariner2debiancve3prion3ics1