Published: 17/01/2023 Updated: 10/07/2023

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 0

It exists that FreeRADIUS incorrectly handled memory when processing certain abinary attributes. An attacker could possibly use this issue to cause a denial of service on the server. (CVE-2022-41861)

Vulnerable Product	Search on Vulmon	Subscribe to Product
freeradius freeradius

Synopsis Moderate: freeradius security and bug fix update Type/Severity Security Advisory: Moderate Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for freeradius is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this upd ...

Several security issues were fixed in FreeRADIUS ...

The EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack (CVE-2022-41859) When an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries This lookup will fail, but t ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-20 https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e https://freeradius.org/security/https://access.redhat.com/errata/RHSA-2023:2166 https://ubuntu.com/security/notices/USN-5785-1 https://nvd.nist.gov https://www.cisa.gov/news-events/ics-advisories/icsa-24-046-11

CVE-2022-41861

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect