Red Hat Security AdvisoryRHSA-2012:1326
freeradius security update
Released 2012-10-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) freeradius-2.1.12-4.el6_3
- Red Hat Enterprise Linux Server Optional (v. 6) freeradius-2.1.12-4.el6_3, freeradius-krb5-2.1.12-4.el6_3, freeradius-ldap-2.1.12-4.el6_3 +6
- Red Hat Enterprise Linux Workstation (v. 6) freeradius-2.1.12-4.el6_3
- Red Hat Enterprise Linux Workstation Optional (v. 6) freeradius-2.1.12-4.el6_3, freeradius-krb5-2.1.12-4.el6_3, freeradius-ldap-2.1.12-4.el6_3 +6
Fixes 1 record
Priority LOW 39
Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arb…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05698 · Published 2012-09-18 · Fixed CWE-119
