(RHSA-2009:1451) Moderate: freeradius security update

2009-09-1700:00:00

access.redhat.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.955 High

EPSS

Percentile

99.2%

JSON

FreeRADIUS is a high-performance and highly configurable free Remote
Authentication Dial In User Service (RADIUS) server, designed to allow
centralized authentication and authorization for a network.

An input validation flaw was discovered in the way FreeRADIUS decoded
specific RADIUS attributes from RADIUS packets. A remote attacker could use
this flaw to crash the RADIUS daemon (radiusd) via a specially-crafted
RADIUS packet. (CVE-2009-3111)

Users of FreeRADIUS are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, radiusd will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat5i386freeradius-postgresql< 1.1.3-1.5.el5_4freeradius-postgresql-1.1.3-1.5.el5_4.i386.rpm
RedHat5s390xfreeradius-postgresql< 1.1.3-1.5.el5_4freeradius-postgresql-1.1.3-1.5.el5_4.s390x.rpm
RedHat5ppcfreeradius-unixodbc< 1.1.3-1.5.el5_4freeradius-unixODBC-1.1.3-1.5.el5_4.ppc.rpm
RedHat5x86_64freeradius-unixodbc< 1.1.3-1.5.el5_4freeradius-unixODBC-1.1.3-1.5.el5_4.x86_64.rpm
RedHat5x86_64freeradius-postgresql< 1.1.3-1.5.el5_4freeradius-postgresql-1.1.3-1.5.el5_4.x86_64.rpm
RedHat5s390xfreeradius-mysql< 1.1.3-1.5.el5_4freeradius-mysql-1.1.3-1.5.el5_4.s390x.rpm
RedHat5ppcfreeradius-postgresql< 1.1.3-1.5.el5_4freeradius-postgresql-1.1.3-1.5.el5_4.ppc.rpm
RedHat5x86_64freeradius-mysql< 1.1.3-1.5.el5_4freeradius-mysql-1.1.3-1.5.el5_4.x86_64.rpm
RedHat5i386freeradius-mysql< 1.1.3-1.5.el5_4freeradius-mysql-1.1.3-1.5.el5_4.i386.rpm
RedHat5srcfreeradius< 1.1.3-1.5.el5_4freeradius-1.1.3-1.5.el5_4.src.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	5	i386	freeradius-postgresql	< 1.1.3-1.5.el5_4	freeradius-postgresql-1.1.3-1.5.el5_4.i386.rpm
RedHat	5	s390x	freeradius-postgresql	< 1.1.3-1.5.el5_4	freeradius-postgresql-1.1.3-1.5.el5_4.s390x.rpm
RedHat	5	ppc	freeradius-unixodbc	< 1.1.3-1.5.el5_4	freeradius-unixODBC-1.1.3-1.5.el5_4.ppc.rpm
RedHat	5	x86_64	freeradius-unixodbc	< 1.1.3-1.5.el5_4	freeradius-unixODBC-1.1.3-1.5.el5_4.x86_64.rpm
RedHat	5	x86_64	freeradius-postgresql	< 1.1.3-1.5.el5_4	freeradius-postgresql-1.1.3-1.5.el5_4.x86_64.rpm
RedHat	5	s390x	freeradius-mysql	< 1.1.3-1.5.el5_4	freeradius-mysql-1.1.3-1.5.el5_4.s390x.rpm
RedHat	5	ppc	freeradius-postgresql	< 1.1.3-1.5.el5_4	freeradius-postgresql-1.1.3-1.5.el5_4.ppc.rpm
RedHat	5	x86_64	freeradius-mysql	< 1.1.3-1.5.el5_4	freeradius-mysql-1.1.3-1.5.el5_4.x86_64.rpm
RedHat	5	i386	freeradius-mysql	< 1.1.3-1.5.el5_4	freeradius-mysql-1.1.3-1.5.el5_4.i386.rpm
RedHat	5	src	freeradius	< 1.1.3-1.5.el5_4	freeradius-1.1.3-1.5.el5_4.src.rpm