Skip to content
OpenAdvisories
Unscored RHSA-2009:1451 1 CVE

Red Hat Security Advisory: freeradius security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 10

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client_workstation freeradius 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation freeradius-debuginfo 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation freeradius-mysql 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation freeradius-postgresql 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::client_workstation freeradius-unixODBC 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server freeradius 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server freeradius-debuginfo 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server freeradius-mysql 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server freeradius-postgresql 0:1.1.3-1.5.el5_4
Red Hat · RHEL 5 enterprise_linux:5::server freeradius-unixODBC 0:1.1.3-1.5.el5_4

Vulnerabilities 1

  • Unscored —
    CVE-2009-3111 Public exploit EPSS 11%

    The rad_decode function in FreeRADIUS before 1.1.8 allows remote attackers to cause a denial of service (radiusd crash)…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521912
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1451.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-3111
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-3111
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-3111