remote code execution in freeradius

2006-03-2809:49:28

lists.opensuse.org

0.004 Low

EPSS

Percentile

70.3%

JSON

Insufficient input validation was being done in the EAP-MSCHAPv2 state machine of the FreeRADIUS authentication server.

Solution

There is no known workaround, please install the update packages.

OSVersionArchitecturePackageVersionFilename
openSUSE10.0ppcfreeradius< 1.0.4-4.2freeradius-1.0.4-4.2.ppc.rpm
openSUSE9.1x86_64freeradius< 1.0.5-2.14freeradius-1.0.5-2.14.x86_64.rpm
openSUSE10.0x86_64freeradius< 1.0.4-4.2freeradius-1.0.4-4.2.x86_64.rpm
openSUSE9.1i586freeradius< 1.0.5-2.14freeradius-1.0.5-2.14.i586.rpm
openSUSE10.0i586freeradius< 1.0.4-4.2freeradius-1.0.4-4.2.i586.rpm
openSUSE9.2x86_64freeradius< 1.0.0-5.8freeradius-1.0.0-5.8.x86_64.rpm
openSUSE9.2i586freeradius< 1.0.0-5.8freeradius-1.0.0-5.8.i586.rpm
openSUSE9.3i586freeradius< 1.0.2-5.7freeradius-1.0.2-5.7.i586.rpm
openSUSE9.3x86_64freeradius< 1.0.2-5.7freeradius-1.0.2-5.7.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	10.0	ppc	freeradius	< 1.0.4-4.2	freeradius-1.0.4-4.2.ppc.rpm
openSUSE	9.1	x86_64	freeradius	< 1.0.5-2.14	freeradius-1.0.5-2.14.x86_64.rpm
openSUSE	10.0	x86_64	freeradius	< 1.0.4-4.2	freeradius-1.0.4-4.2.x86_64.rpm
openSUSE	9.1	i586	freeradius	< 1.0.5-2.14	freeradius-1.0.5-2.14.i586.rpm
openSUSE	10.0	i586	freeradius	< 1.0.4-4.2	freeradius-1.0.4-4.2.i586.rpm
openSUSE	9.2	x86_64	freeradius	< 1.0.0-5.8	freeradius-1.0.0-5.8.x86_64.rpm
openSUSE	9.2	i586	freeradius	< 1.0.0-5.8	freeradius-1.0.0-5.8.i586.rpm
openSUSE	9.3	i586	freeradius	< 1.0.2-5.7	freeradius-1.0.2-5.7.i586.rpm
openSUSE	9.3	x86_64	freeradius	< 1.0.2-5.7	freeradius-1.0.2-5.7.x86_64.rpm

0.004 Low

EPSS

Percentile

70.3%

JSON

Related for SUSE-SA:2006:019