Red Hat Security AdvisoryRHSA-2015:1287
freeradius security, bug fix, and enhancement update
Released 2015-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 6) freeradius-2.2.6-4.el6
- Red Hat Enterprise Linux Server Optional (v. 6) freeradius-krb5-2.2.6-4.el6, freeradius-ldap-2.2.6-4.el6, freeradius-mysql-2.2.6-4.el6 +5
- Red Hat Enterprise Linux Workstation (v. 6) freeradius-2.2.6-4.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) freeradius-krb5-2.2.6-4.el6, freeradius-ldap-2.2.6-4.el6, freeradius-mysql-2.2.6-4.el6 +5
Fixes 1 record
Priority LOW 39
Stack-based buffer overflow in the normify function in the rlm_pap module (modules/rlm_pap/rlm_pap.c) in FreeRADIUS 2.x, possibly 2.2.3 and earlier, and 3.x, possibly 3.0.1 and earlier, might allow attackers to cause a d…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03912 · Published 2014-11-02 · Partial fix CWE-119
