Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-1585-1
HistorySep 26, 2012 - 12:00 a.m.

FreeRADIUS vulnerability

2012-09-2600:00:00
ubuntu.com
23

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.5%

JSON

Releases

  • Ubuntu 12.04
  • Ubuntu 11.10
  • Ubuntu 11.04

Packages

  • freeradius - a high-performance and highly configurable RADIUS server

Details

Timo Warns discovered that FreeRADIUS incorrectly handled certain long
timestamps in client certificates. A remote attacker could exploit this
flaw and cause the FreeRADIUS server to crash, resulting in a denial of
service, or possibly execute arbitrary code.

The default compiler options for affected releases should reduce the
vulnerability to a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchfreeradius< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchfreeradius-dbg< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchfreeradius-iodbc< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchfreeradius-krb5< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchfreeradius-ldap< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchfreeradius-mysql< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchfreeradius-postgresql< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchfreeradius-utils< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchlibfreeradius-dev< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Ubuntu12.04noarchlibfreeradius2< 2.1.10+dfsg-3ubuntu0.12.04.1UNKNOWN
Rows per page:
1-10 of 301

Related

openvas 27
nessus 20
suse 1
debian 1
amazon 1
checkpoint_advisories 1
altlinux 1
oraclelinux 3
debiancve 1
veracode 1
redhat 2
securityvulns 3
cve 1
ubuntucve 1
prion 1
centos 2
fedora 3
freebsd 1
gentoo 1
openvas
openvas
Mandriva Update for freeradius MDVSA-2012:159 (freeradius)
2012-10-05 00:00:00
Ubuntu Update for freeradius USN-1585-1
2012-09-27 00:00:00
CentOS Update for freeradius2 CESA-2012:1327 centos5
2012-10-03 00:00:00
nessus
nessus
Oracle Linux 5 : freeradius2 (ELSA-2012-1327)
2013-07-12 00:00:00
Mandriva Linux Security Advisory : freeradius (MDVSA-2012:159)
2012-10-04 00:00:00
Ubuntu 11.04 / 11.10 / 12.04 LTS : freeradius vulnerability (USN-1585-1)
2012-09-27 00:00:00
suse
suse
freeradius: fix stack overflow in TLS handling (important)
2012-09-18 11:08:34
debian
debian
[SECURITY] [DSA 2546-1] freeradius security update
2012-09-11 18:38:27
amazon
amazon
Medium: freeradius
2012-10-08 10:40:00
checkpoint_advisories
checkpoint_advisories
FreeRADIUS Client Certificate Verification Stack Buffer Overflow (CVE-2012-3547)
2012-11-18 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 6 package freeradius version 2.1.10-alt3.M60P.1
2012-09-14 00:00:00
oraclelinux
oraclelinux
freeradius security update
2012-10-02 00:00:00
freeradius2 security update
2012-10-02 00:00:00
freeradius2 security and bug fix update
2013-01-11 00:00:00
debiancve
debiancve
CVE-2012-3547
2012-09-18 17:55:00
veracode
veracode
Denial Of Service (DoS)
2019-01-15 08:58:21
redhat
redhat
(RHSA-2012:1327) Moderate: freeradius2 security update
2012-10-02 00:00:00
(RHSA-2012:1326) Moderate: freeradius security update
2012-10-02 00:00:00
securityvulns
securityvulns
FreeRADIUS buffer overflow
2012-09-18 00:00:00
[PRE-SA-2012-06] FreeRADIUS: Stack Overflow in TLS-based EAP Methods
2012-09-18 00:00:00
[SECURITY] [DSA 2546-1] freeradius security update
2012-09-18 00:00:00
cve
cve
CVE-2012-3547
2012-09-18 17:55:00
ubuntucve
ubuntucve
CVE-2012-3547
2012-09-18 00:00:00
prion
prion
Stack overflow
2012-09-18 17:55:00
centos
centos
freeradius security update
2012-10-03 03:29:55
freeradius2 security update
2012-10-03 01:47:30
fedora
fedora
[SECURITY] Fedora 16 Update: freeradius-2.2.0-0.fc16
2012-10-18 00:21:31
[SECURITY] Fedora 18 Update: freeradius-2.2.0-0.fc18
2012-10-23 08:45:12
[SECURITY] Fedora 17 Update: freeradius-2.2.0-0.fc17
2012-10-23 01:50:38
freebsd
freebsd
freeradius -- arbitrary code execution for TLS-based authentication
2012-09-10 00:00:00
gentoo
gentoo
FreeRADIUS: Multiple vulnerabilities
2013-11-13 00:00:00

7.4 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.063 Low

EPSS

Percentile

93.5%

JSON
Related for USN-1585-1
openvas27nessus20suse1debian1amazon1checkpoint_advisories1altlinux1oraclelinux3debiancve1veracode1redhat2securityvulns3cve1ubuntucve1prion1centos2fedora3freebsd1gentoo1