Red Hat Security AdvisoryRHSA-2017:1581
freeradius security update
Released 2017-06-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7) freeradius-3.0.4-8.el7_3
- Red Hat Enterprise Linux Server Optional (v. 7) freeradius-devel-3.0.4-8.el7_3, freeradius-devel-3.0.4-8.el7_3.ppc, freeradius-doc-3.0.4-8.el7_3 +9
- Red Hat Enterprise Linux Workstation (v. 7) freeradius-3.0.4-8.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) freeradius-devel-3.0.4-8.el7_3, freeradius-doc-3.0.4-8.el7_3, freeradius-krb5-3.0.4-8.el7_3 +8
Fixes 1 record
Priority MEDIUM 49
The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote a…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03914 · Published 2017-05-29 · Fixed CWE-287
