Red Hat Security AdvisoryRHSA-2012:1327
freeradius2 security update
Released 2012-10-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) freeradius2-2.1.12-4.el5_8, freeradius2-2.1.12-4.el5_8.i386, freeradius2-krb5-2.1.12-4.el5_8 +15
- Red Hat Enterprise Linux (v. 5 server) freeradius2-2.1.12-4.el5_8, freeradius2-2.1.12-4.el5_8.i386, freeradius2-2.1.12-4.el5_8.ia64 +33
Fixes 1 record
Priority LOW 39
Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remote attackers to cause a denial of service (server crash) and possibly execute arb…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05698 · Published 2012-09-18 · Fixed CWE-119
