Lucene search
Redhat.comRH:CVE-2019-10143HistoryApr 07, 2020 - 4:56 a.m.
CVE-2019-10143
2020-04-0704:56:34
redhat.com
access.redhat.com
11
0.001 Low
EPSS
Percentile
23.5%
It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user.
Mitigation
Add su radiusd:radiusd to all log sections in /etc/logrotate.d/radiusd.
By keeping SELinux in "Enforcing" mode, radiusd user will be limited in the directories he can write to.
Related
openvas
openvas
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2019-2065)
2020-01-23 00:00:00
Fedora Update for freeradius FEDORA-2019-9454ce61b2
2019-08-14 00:00:00
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2019-1763)
2020-01-23 00:00:00
nessus
nessus
CentOS 8 : freeradius:3.0 (CESA-2019:3353)
2021-01-29 00:00:00
EulerOS 2.0 SP8 : freeradius (EulerOS-SA-2019-1763)
2019-07-25 00:00:00
EulerOS 2.0 SP5 : freeradius (EulerOS-SA-2019-1674)
2019-07-02 00:00:00
prion
prion
Design/Logic Flaw
2019-05-24 17:29:00
ubuntucve
ubuntucve
CVE-2019-10143
2019-05-24 00:00:00
osv
osv
CVE-2019-10143
2019-05-24 17:29:00
nvd
nvd
CVE-2019-10143
2019-05-24 17:29:02
cvelist
cvelist
CVE-2019-10143
2019-05-24 00:00:00
alpinelinux
alpinelinux
CVE-2019-10143
2019-05-24 17:29:02
oraclelinux
oraclelinux
freeradius:3.0 security and bug fix update
2019-11-14 00:00:00
freeradius security and bug fix update
2020-10-06 00:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: freeradius-3.0.19-3.fc29
2019-08-13 01:59:31
[SECURITY] Fedora 30 Update: freeradius-3.0.19-3.fc30
2019-06-19 22:46:10
veracode
veracode
Privilege Escalation
2020-05-10 23:27:53
cve
cve
CVE-2019-10143
2019-05-24 17:29:02
zdt
zdt
FreeRadius 3.0.19 Logrotate Privilege Escalation Vulnerability
2019-11-16 00:00:00
packetstorm
packetstorm
FreeRadius 3.0.19 Logrotate Privilege Escalation
2019-11-15 00:00:00
debiancve
debiancve
CVE-2019-10143
2019-05-24 17:29:02
redhat
redhat
(RHSA-2019:3353) Moderate: freeradius:3.0 security and bug fix update
2019-11-05 17:34:35
(RHSA-2020:3984) Moderate: freeradius security and bug fix update
2020-09-29 07:48:48
mageia
mageia
Updated freeradius packages fix security vulnerabilities
2020-01-05 18:37:51
centos
centos
freeradius security update
2020-10-20 18:02:54
amazon
amazon
Medium: freeradius
2020-10-22 17:34:00