60 matches found
CentOS 7 : freeradius (RHSA-2020:3984)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3984 advisory. - It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has...
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2020-2133)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : freeradius (EulerOS-SA-2020-2133)
According to the versions of the freeradius package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threa...
SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2020:2391-1)
This update for freeradius-server fixes the following issues : CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847. Note that Tenable Network Security has extracted the preceding descripti...
SUSE-SU-2020:2391-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. - CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847...
Huawei EulerOS: Security Advisory for freeradius (EulerOS-SA-2020-1847)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Update : freeradius-server (openSUSE-2020-553)
This update for freeradius-server fixes the following issues : - CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. - CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847. - Fixed an issue in TLS-EAP where the OCSP verification, when an...
openSUSE: Security Advisory for freeradius-server (openSUSE-SU-2020:0553-1)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
OPENSUSE-SU-2020:0553-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. - CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847. - Fixed an issue in TLS-EAP where the OCSP verification, when an...
CVE-2020-7131
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...
Design/Logic Flaw
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...
CVE-2020-7131
This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...
CVE-2020-7131
CVE-2020-7131 affects Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity on J/H-series NonStop systems. The issue arises from an open UDP port 17185 on the Maintenance LAN, enabling information disclosure, DoS, local memory corruption, and potentially full system contr...
HPESBNS03996 rev.2 - HPE NonStop Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity, Multiple Remote Vulnerabilities
Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information, local memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Integrated Maintenance Entity T1805 - T1805A01 through T1805A01^AAH Maintenance Entity T2805 - T2805A01 through T2805A01^AAU...
SUSE SLED15 / SLES15 Security Update : freeradius-server (SUSE-SU-2020:1023-1)
This update for freeradius-server fixes the following issues : CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847. Fixed an issue in TLS-EAP where the OCSP verification, when an...
SUSE-SU-2020:1020-1 Security update for freeradius-server
This update for freeradius-server fixes the following issues: - CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd bsc1144524. - CVE-2019-17185: Fixed a debial of service due to multithreaded BNCTX access bsc1166847...
CVE-2019-17185
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a...
CVE-2019-17185
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a...
CVE-2019-17185
The CVE-2019-17185 issue affects FreeRADIUS 3.0.x prior to 3.0.20, where the EAP-pwd module reuses a global OpenSSL BN_CTX across concurrent handshakes, causing crashes and enabling Denial-of-Service when multiple EAP-pwd handshakes occur. Public advisories (e.g., RLSA-2020:4799, RHSA, USN-5785-1...