PT-2020-9878

Name of the Vulnerable Software and Affected Versions FreeRADIUS versions 3.0.x through 3.0.19 Description The EAP-pwd module in FreeRADIUS used a global OpenSSL BN CTX instance to handle all handshakes, resulting in multiple threads using the same instance concurrently. This leads to crashes whe...