Lucene search
Redhat.comRH:CVE-2022-41859HistoryDec 07, 2022 - 5:01 p.m.
CVE-2022-41859
2022-12-0717:01:21
redhat.com
access.redhat.com
15
freeradius
eap-pwd
information leak
cve-2022-41859
dictionary attack
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
51.1%
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
Related
nvd
nvd
CVE-2022-41859
2023-01-17 18:15:11
osv
osv
CVE-2022-41859
2023-01-17 18:15:11
Moderate: freeradius:3.0 security update
2023-05-16 00:00:00
Moderate: freeradius security and bug fix update
2023-05-09 00:00:00
cve
cve
CVE-2022-41859
2023-01-17 18:15:11
alpinelinux
alpinelinux
CVE-2022-41859
2023-01-17 18:15:11
ubuntucve
ubuntucve
CVE-2022-41859
2023-01-17 00:00:00
cvelist
cvelist
CVE-2022-41859
2023-01-17 00:00:00
veracode
veracode
Information Disclosure
2023-03-12 08:47:02
debiancve
debiancve
CVE-2022-41859
2023-01-17 18:15:11
prion
prion
Information disclosure
2023-01-17 18:15:00
nessus
nessus
SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2023:0135-1)
2023-01-26 00:00:00
SUSE SLES15 Security Update : freeradius-server (SUSE-SU-2022:4626-1)
2022-12-28 00:00:00
SUSE SLES15 Security Update : freeradius-server (SUSE-SU-2022:4620-1)
2022-12-28 00:00:00
almalinux
almalinux
Moderate: freeradius security and bug fix update
2023-05-09 00:00:00
Moderate: freeradius:3.0 security update
2023-05-16 00:00:00
oraclelinux
oraclelinux
freeradius security and bug fix update
2023-05-15 00:00:00
freeradius:3.0 security update
2023-05-24 00:00:00
redhat
redhat
(RHSA-2023:2870) Moderate: freeradius:3.0 security update
2023-05-16 05:57:04
(RHSA-2023:2166) Moderate: freeradius security and bug fix update
2023-05-09 05:02:09
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0124-1)
2023-01-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4620-1)
2022-12-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4622-1)
2022-12-28 00:00:00
debian
debian
[SECURITY] [DLA 3342-1] freeradius security update
2023-02-24 16:29:58
fedora
fedora
[SECURITY] Fedora 36 Update: freeradius-3.0.26-1.fc36
2022-12-16 01:43:43
amazon
amazon
Medium: freeradius
2023-03-02 21:50:00
mageia
mageia
Updated freeradius packages fix security vulnerability
2022-12-31 01:39:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
51.1%
Related for RH:CVE-2022-41859