Lucene search
PRIOn knowledge basePRION:CVE-2017-9148HistoryMay 29, 2017 - 5:29 p.m.
Authentication flaw
2017-05-2917:29:00
PRIOn knowledge base
www.prio-n.com
The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| freeradius | eq | 2.1.2 | |
| freeradius | eq | 3.0.5 | |
| freeradius | eq | 3.0.8 | |
| freeradius | eq | 3.0.1 | |
| freeradius | eq | 3.1.0 | |
| freeradius | eq | 4.0.0 | |
| freeradius | eq | 2.1.1 | |
| freeradius | eq | 2.1.4 | |
| freeradius | eq | 3.0.3 | |
| freeradius | eq | 3.0.6 |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2017-1135)
2020-01-23 00:00:00
Ubuntu: Security Advisory (USN-3316-1)
2017-06-08 00:00:00
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2017-1134)
2020-01-23 00:00:00
debiancve
debiancve
CVE-2017-9148
2017-05-29 17:29:00
nessus
nessus
FreeBSD : FreeRADIUS -- TLS resumption authentication bypass (673dce46-46d0-11e7-a539-0050569f7e80)
2017-06-02 00:00:00
Ubuntu 17.04 : freeradius vulnerability (USN-3316-1)
2017-06-08 00:00:00
Fedora 25 : freeradius (2017-e698bba980)
2017-06-12 00:00:00
myhack58
myhack58
freebsd
freebsd
FreeRADIUS -- TLS resumption authentication bypass
2017-02-03 00:00:00
gentoo
gentoo
FreeRADIUS: Security bypass
2017-06-27 00:00:00
centos
centos
freeradius security update
2017-06-29 17:08:45
ubuntu
ubuntu
FreeRADIUS vulnerability
2017-06-07 00:00:00
archlinux
archlinux
[ASA-201706-2] freeradius: authentication bypass
2017-06-02 00:00:00
ubuntucve
ubuntucve
CVE-2017-9148
2017-05-29 00:00:00
cvelist
cvelist
CVE-2017-9148
2017-05-29 17:00:00
oraclelinux
oraclelinux
freeradius security update
2017-06-28 00:00:00
threatpost
threatpost
FreeRADIUS Update Resolves Authentication Bypass
2017-05-30 14:39:55
redhatcve
redhatcve
CVE-2017-9148
2017-05-30 08:20:48
cve
cve
CVE-2017-9148
2017-05-29 17:29:00
fedora
fedora
[SECURITY] Fedora 25 Update: freeradius-3.0.14-1.fc25
2017-06-09 11:31:22
[SECURITY] Fedora 26 Update: freeradius-3.0.14-1.fc26
2017-06-09 20:18:57
veracode
veracode
Authentication Bypass
2020-12-06 03:20:56
osv
osv
CVE-2017-9148
2017-05-29 17:29:00
freeradius - security update
2017-06-05 00:00:00
nvd
nvd
CVE-2017-9148
2017-05-29 17:29:00
redhat
redhat
(RHSA-2017:1581) Important: freeradius security update
2017-06-28 03:55:49
debian
debian
[SECURITY] [DLA 977-1] freeradius security update
2017-06-05 16:33:07