Red Hat Security AdvisoryRHSA-2019:3353
freeradius:3.0 security and bug fix update
Released 2019-11-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.aarch64::freeradius:3.0, freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.ppc64le::freeradius:3.0, freeradius-3.0.17-6.module+el8.1.0+3392+9bd8939b.s390x::freeradius:3.0 +46
Fixes 1 record
Priority HIGH 66
It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by trickin…
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00345 · Published 2019-05-24 · Partial fix CWE-250
