Red Hat Security AdvisoryRHSA-2020:1672
freeradius:3.0 security update
Released 2020-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) freeradius-3.0.17-7.module+el8.2.0+4847+336970e8.aarch64::freeradius:3.0, freeradius-3.0.17-7.module+el8.2.0+4847+336970e8.ppc64le::freeradius:3.0, freeradius-3.0.17-7.module+el8.2.0+4847+336970e8.s390x::freeradius:3.0 +46
Fixes 1 record
Priority LOW 32
In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01798 · Published 2019-12-03 · Fixed CWE-203
