Red Hat Security AdvisoryRHSA-2007:0338
freeradius security update
Released 2007-05-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) freeradius-1.1.3-1.2.el5, freeradius-1.1.3-1.2.el5.i386, freeradius-1.1.3-1.2.el5.ia64 +13
- Red Hat Enterprise Linux AS version 3 freeradius-1.0.1-2.RHEL3.4, freeradius-1.0.1-2.RHEL3.4.i386, freeradius-1.0.1-2.RHEL3.4.ia64 +1
- Red Hat Enterprise Linux AS version 4 freeradius-1.0.1-3.RHEL4.5, freeradius-1.0.1-3.RHEL4.5.i386, freeradius-1.0.1-3.RHEL4.5.ia64 +13
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) freeradius-1.1.3-1.2.el5, freeradius-1.1.3-1.2.el5.i386, freeradius-mysql-1.1.3-1.2.el5 +5
- Red Hat Enterprise Linux ES version 3 freeradius-1.0.1-2.RHEL3.4, freeradius-1.0.1-2.RHEL3.4.i386, freeradius-1.0.1-2.RHEL3.4.ia64
- Red Hat Enterprise Linux ES version 4 freeradius-1.0.1-3.RHEL4.5, freeradius-1.0.1-3.RHEL4.5.i386, freeradius-1.0.1-3.RHEL4.5.ia64 +9
Fixes 1 record
Priority LOW 28
Memory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service (memory consumption) via a large number of EAP-TTLS tunnel connections using malformed Diameter format attributes, which ca…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02476 · Published 2007-04-13 · Fixed
