Lucene search
Veracode Vulnerability DatabaseVERACODE:19921HistoryMay 16, 2019 - 3:42 a.m.
Authentication Bypass
2019-05-1603:42:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.008 Low
EPSS
Percentile
81.5%
FreeRADIUS is vulnerable to authentication bypass. Remote unauthenticated attackers could bypass the authentication via the mishandled protection mechanism aka a “Dragonblood” issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freeradius | eq | 3.0.13__9.el7_5 | |
| freeradius | eq | 3.0.13__8.el7_4 | |
| freeradius | eq | 3.0.13__9.el7_5 | |
| freeradius | eq | 3.0.13__8.el7_4 |
References
lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html
lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html
access.redhat.com/errata/RHSA-2019:1131
access.redhat.com/errata/RHSA-2019:1142
access.redhat.com/security/updates/classification/#important
bugzilla.redhat.com/show_bug.cgi?id=1695748
freeradius.org/release_notes/?br=3.0.x&re=3.0.19
freeradius.org/security/
papers.mathyvanhoef.com/dragonblood.pdf
usn.ubuntu.com/3954-1/
www.kb.cert.org/vuls/id/871675/
Related
redhatcve
redhatcve
CVE-2019-11235
2020-04-08 21:44:07
nessus
nessus
SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2019:1039-1)
2019-04-26 00:00:00
openSUSE Security Update : freeradius-server (openSUSE-2020-542)
2020-04-27 00:00:00
openSUSE Security Update : freeradius-server (openSUSE-2019-1394)
2019-05-14 00:00:00
suse
suse
Security update for freeradius-server (important)
2020-04-23 00:00:00
Security update for freeradius-server (important)
2019-05-08 00:00:00
Security update for freeradius-server (important)
2019-05-13 00:00:00
openvas
openvas
openSUSE: Security Advisory for freeradius-server (openSUSE-SU-2019:1394-1)
2019-05-14 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:1086-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:1181-1)
2021-04-19 00:00:00
oraclelinux
oraclelinux
freeradius:3.0 security update
2019-07-30 00:00:00
freeradius security update
2019-05-09 00:00:00
mageia
mageia
Updated freeradius packages fix security vulnerability
2019-05-18 15:33:10
ubuntu
ubuntu
FreeRADIUS vulnerabilities
2019-04-24 00:00:00
centos
centos
freeradius security update
2019-05-15 20:30:14
redhat
redhat
(RHSA-2019:1131) Important: freeradius security update
2019-05-09 14:32:05
(RHSA-2019:1142) Important: freeradius:3.0 security update
2019-05-13 04:48:13
ubuntucve
ubuntucve
CVE-2019-11235
2019-04-16 00:00:00
nvd
nvd
CVE-2019-11235
2019-04-22 11:29:03
alpinelinux
alpinelinux
CVE-2019-11235
2019-04-22 11:29:03
prion
prion
Code injection
2019-04-22 11:29:00
osv
osv
CVE-2019-11235
2019-04-22 11:29:03
cve
cve
CVE-2019-11235
2019-04-22 11:29:03
cvelist
cvelist
CVE-2019-11235
2019-04-21 16:40:32
debiancve
debiancve
CVE-2019-11235
2019-04-22 11:29:03
rosalinux
rosalinux
Advisory ROSA-SA-2021-1836
2021-07-02 16:43:57
amazon
amazon
Important: freeradius
2019-05-29 19:08:00
hackerone
hackerone
ibm
ibm