(RHSA-2012:1326) Moderate: freeradius security update

2012-10-0200:00:00

access.redhat.com

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.049 Low

EPSS

Percentile

91.9%

JSON

FreeRADIUS is a high-performance and highly configurable free Remote
Authentication Dial In User Service (RADIUS) server, designed to allow
centralized authentication and authorization for a network.

A buffer overflow flaw was discovered in the way radiusd handled the
expiration date field in X.509 client certificates. A remote attacker could
possibly use this flaw to crash radiusd if it were configured to use the
certificate or TLS tunnelled authentication methods (such as EAP-TLS,
EAP-TTLS, and PEAP). (CVE-2012-3547)

Red Hat would like to thank Timo Warns of PRESENSE Technologies GmbH for
reporting this issue.

Users of FreeRADIUS are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, radiusd will be restarted automatically.

OSVersionArchitecturePackageVersionFilename
RedHat6x86_64freeradius< 2.1.12-4.el6_3freeradius-2.1.12-4.el6_3.x86_64.rpm
RedHat6i686freeradius-postgresql< 2.1.12-4.el6_3freeradius-postgresql-2.1.12-4.el6_3.i686.rpm
RedHat6s390xfreeradius< 2.1.12-4.el6_3freeradius-2.1.12-4.el6_3.s390x.rpm
RedHat6x86_64freeradius-utils< 2.1.12-4.el6_3freeradius-utils-2.1.12-4.el6_3.x86_64.rpm
RedHat6i686freeradius-krb5< 2.1.12-4.el6_3freeradius-krb5-2.1.12-4.el6_3.i686.rpm
RedHat6s390xfreeradius-unixodbc< 2.1.12-4.el6_3freeradius-unixODBC-2.1.12-4.el6_3.s390x.rpm
RedHat6s390xfreeradius-mysql< 2.1.12-4.el6_3freeradius-mysql-2.1.12-4.el6_3.s390x.rpm
RedHat6i686freeradius-mysql< 2.1.12-4.el6_3freeradius-mysql-2.1.12-4.el6_3.i686.rpm
RedHat6x86_64freeradius-krb5< 2.1.12-4.el6_3freeradius-krb5-2.1.12-4.el6_3.x86_64.rpm
RedHat6ppc64freeradius-krb5< 2.1.12-4.el6_3freeradius-krb5-2.1.12-4.el6_3.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	6	x86_64	freeradius	< 2.1.12-4.el6_3	freeradius-2.1.12-4.el6_3.x86_64.rpm
RedHat	6	i686	freeradius-postgresql	< 2.1.12-4.el6_3	freeradius-postgresql-2.1.12-4.el6_3.i686.rpm
RedHat	6	s390x	freeradius	< 2.1.12-4.el6_3	freeradius-2.1.12-4.el6_3.s390x.rpm
RedHat	6	x86_64	freeradius-utils	< 2.1.12-4.el6_3	freeradius-utils-2.1.12-4.el6_3.x86_64.rpm
RedHat	6	i686	freeradius-krb5	< 2.1.12-4.el6_3	freeradius-krb5-2.1.12-4.el6_3.i686.rpm
RedHat	6	s390x	freeradius-unixodbc	< 2.1.12-4.el6_3	freeradius-unixODBC-2.1.12-4.el6_3.s390x.rpm
RedHat	6	s390x	freeradius-mysql	< 2.1.12-4.el6_3	freeradius-mysql-2.1.12-4.el6_3.s390x.rpm
RedHat	6	i686	freeradius-mysql	< 2.1.12-4.el6_3	freeradius-mysql-2.1.12-4.el6_3.i686.rpm
RedHat	6	x86_64	freeradius-krb5	< 2.1.12-4.el6_3	freeradius-krb5-2.1.12-4.el6_3.x86_64.rpm
RedHat	6	ppc64	freeradius-krb5	< 2.1.12-4.el6_3	freeradius-krb5-2.1.12-4.el6_3.ppc64.rpm