Summary
It was discovered that FreeRADIUS incorrectly handled certain inputs.
An attacker could possibly use this issue to bypass authentication.
(CVE-2019-11234, CVE-2019-11235)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | freeradius | 3.0.16+dfsg-1ubuntu3.1 |
Vulnerabilities 2
-
Unscored —
FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a s…
-
Unscored —
FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that…