Skip to content
OpenAdvisories
Unscored RHSA-2015:1287 1 CVE

Red Hat Security Advisory: freeradius security, bug fix, and enhancement update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 20

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::server freeradius 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-debuginfo 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-krb5 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-ldap 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-mysql 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-perl 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-postgresql 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-python 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-unixODBC 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::server freeradius-utils 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-debuginfo 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-krb5 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-ldap 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-mysql 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-perl 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-postgresql 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-python 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-unixODBC 0:2.2.6-4.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation freeradius-utils 0:2.2.6-4.el6

Vulnerabilities 1

  • Unscored —

    Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x…

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://raw.githubusercontent.com/FreeRADIUS/freeradius-server/v3.0.x/doc/ChangeLog
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=904578
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=921563
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=921567
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1060319
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1066761
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1078736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1135439
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1142669
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1173388
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1189011
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1189386
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1189394
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_1287.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-2015
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-2015
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-2015