Lucene search
Veracode Vulnerability DatabaseVERACODE:19920HistoryMay 16, 2019 - 3:42 a.m.
Authentication Bypass
2019-05-1603:42:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.006 Low
EPSS
Percentile
78.1%
FreeRADIUS is vulnerable to authentication bypass. Remote unauthenticated attackers could exploit a flaw since the application does not prevent the use of reflection for authentication spoofing, aka a “Dragonblood” issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freeradius | eq | 3.0.13__9.el7_5 | |
| freeradius | eq | 3.0.13__8.el7_4 | |
| freeradius | eq | 3.0.13__9.el7_5 | |
| freeradius | eq | 3.0.13__8.el7_4 |
References
lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html
lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html
access.redhat.com/errata/RHSA-2019:1131
access.redhat.com/errata/RHSA-2019:1142
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1695783
freeradius.org/release_notes/?br=3.0.x&re=3.0.19
freeradius.org/security/
papers.mathyvanhoef.com/dragonblood.pdf
usn.ubuntu.com/3954-1/
www.kb.cert.org/vuls/id/871675/
Related
openvas
openvas
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2019-1573)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2019-1572)
2020-01-23 00:00:00
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2019-1574)
2020-01-23 00:00:00
nessus
nessus
EulerOS 2.0 SP2 : freeradius (EulerOS-SA-2019-1572)
2019-05-29 00:00:00
EulerOS 2.0 SP3 : freeradius (EulerOS-SA-2019-1573)
2019-05-29 00:00:00
EulerOS 2.0 SP5 : freeradius (EulerOS-SA-2019-1574)
2019-05-29 00:00:00
ubuntucve
ubuntucve
CVE-2019-11234
2019-04-16 00:00:00
cve
cve
CVE-2019-11234
2019-04-22 11:29:03
alpinelinux
alpinelinux
CVE-2019-11234
2019-04-22 11:29:03
debiancve
debiancve
CVE-2019-11234
2019-04-22 11:29:03
osv
osv
CVE-2019-11234
2019-04-22 11:29:03
nvd
nvd
CVE-2019-11234
2019-04-22 11:29:03
centos
centos
freeradius security update
2019-05-15 20:30:14
oraclelinux
oraclelinux
freeradius security update
2019-05-09 00:00:00
freeradius:3.0 security update
2019-07-30 00:00:00
cvelist
cvelist
CVE-2019-11234
2019-04-21 16:36:48
redhat
redhat
(RHSA-2019:1131) Important: freeradius security update
2019-05-09 14:32:05
(RHSA-2019:1142) Important: freeradius:3.0 security update
2019-05-13 04:48:13
suse
suse
Security update for freeradius-server (important)
2020-04-23 00:00:00
Security update for freeradius-server (important)
2019-05-08 00:00:00
Security update for freeradius-server (important)
2019-05-13 00:00:00
prion
prion
Authentication flaw
2019-04-22 11:29:00
mageia
mageia
Updated freeradius packages fix security vulnerability
2019-05-18 15:33:10
ubuntu
ubuntu
FreeRADIUS vulnerabilities
2019-04-24 00:00:00
redhatcve
redhatcve
CVE-2019-11234
2019-12-26 21:49:23
amazon
amazon
Important: freeradius
2019-05-29 19:08:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1836
2021-07-02 16:43:57
hackerone
hackerone