Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gentooGentoo FoundationGLSA-201311-09
HistoryNov 13, 2013 - 12:00 a.m.

FreeRADIUS: Multiple vulnerabilities

2013-11-1300:00:00
Gentoo Foundation
security.gentoo.org
15

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.5%

JSON

Background

FreeRADIUS is an open source RADIUS authentication server.

Description

Multiple vulnerabilities have been discovered in FreeRADIUS. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All FreeRADIUS users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-dialup/freeradius-2.2.0"
OSVersionArchitecturePackageVersionFilename
Gentooanyallnet-dialup/freeradius< 2.2.0UNKNOWN

Related

nessus 21
openvas 29
ubuntucve 4
prion 4
securityvulns 5
debiancve 4
cve 4
suse 1
debian 1
amazon 1
veracode 1
redhat 2
oraclelinux 3
fedora 3
freebsd 1
ubuntu 1
centos 2
checkpoint_advisories 1
altlinux 1
nessus
nessus
GLSA-201311-09 : FreeRADIUS: Multiple vulnerabilities
2013-11-13 00:00:00
Mandriva Linux Security Advisory : freeradius (MDVSA-2012:047)
2012-09-06 00:00:00
Oracle Linux 5 : freeradius2 (ELSA-2012-1327)
2013-07-12 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 201311-09
2015-09-29 00:00:00
Mandriva Update for freeradius MDVSA-2012:047 (freeradius)
2012-08-03 00:00:00
Mandriva Update for freeradius MDVSA-2012:047 (freeradius)
2012-08-03 00:00:00
ubuntucve
ubuntucve
CVE-2011-2701
2011-08-04 00:00:00
CVE-2010-3697
2010-10-07 00:00:00
CVE-2010-3696
2010-10-07 00:00:00
prion
prion
Authentication flaw
2011-08-04 02:45:00
Code injection
2010-10-07 21:00:00
Design/Logic Flaw
2010-10-07 21:00:00
securityvulns
securityvulns
[DSB-2011-01] Security Advisory FreeRADIUS 2.1.11
2011-07-26 00:00:00
FreeRADIUS OCSP vulnerability
2011-07-26 00:00:00
FreeRADIUS buffer overflow
2012-09-18 00:00:00
debiancve
debiancve
CVE-2011-2701
2011-08-04 02:45:00
CVE-2010-3697
2010-10-07 21:00:00
CVE-2010-3696
2010-10-07 21:00:00
cve
cve
CVE-2011-2701
2011-08-04 02:45:00
CVE-2010-3697
2010-10-07 21:00:00
CVE-2010-3696
2010-10-07 21:00:00
suse
suse
freeradius: fix stack overflow in TLS handling (important)
2012-09-18 11:08:34
debian
debian
[SECURITY] [DSA 2546-1] freeradius security update
2012-09-11 18:38:27
amazon
amazon
Medium: freeradius
2012-10-08 10:40:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:58:21
redhat
redhat
(RHSA-2012:1327) Moderate: freeradius2 security update
2012-10-02 00:00:00
(RHSA-2012:1326) Moderate: freeradius security update
2012-10-02 00:00:00
oraclelinux
oraclelinux
freeradius2 security update
2012-10-02 00:00:00
freeradius security update
2012-10-02 00:00:00
freeradius2 security and bug fix update
2013-01-11 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: freeradius-2.2.0-0.fc16
2012-10-18 00:21:31
[SECURITY] Fedora 17 Update: freeradius-2.2.0-0.fc17
2012-10-23 01:50:38
[SECURITY] Fedora 18 Update: freeradius-2.2.0-0.fc18
2012-10-23 08:45:12
freebsd
freebsd
freeradius -- arbitrary code execution for TLS-based authentication
2012-09-10 00:00:00
ubuntu
ubuntu
FreeRADIUS vulnerability
2012-09-26 00:00:00
centos
centos
freeradius2 security update
2012-10-03 01:47:30
freeradius security update
2012-10-03 03:29:55
checkpoint_advisories
checkpoint_advisories
FreeRADIUS Client Certificate Verification Stack Buffer Overflow (CVE-2012-3547)
2012-11-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package freeradius version 2.1.10-alt3.M60P.1
2012-09-14 00:00:00

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.5%

JSON
Related for GLSA-201311-09
nessus21openvas29ubuntucve4prion4securityvulns5debiancve4cve4suse1debian1amazon1veracode1redhat2oraclelinux3fedora3freebsd1ubuntu1centos2checkpoint_advisories1altlinux1