Lucene search
+L

1 matches found

RedHat Linux
RedHat Linux
added 2020/09/29 7:44 p.m.9 views

freeradius: eap-pwd: DoS issues due to multithreaded BN_CTX access

In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a...

7.5CVSS5.8AI score0.02222EPSS
SaveExploits0References4
Rows per page
Query Builder