Red Hat Security AdvisoryRHSA-2020:4799
freeradius:3.0 security and bug fix update
Released 2020-11-04 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) freeradius-3.0.20-3.module+el8.3.0+7597+67902674.aarch64::freeradius:3.0, freeradius-3.0.20-3.module+el8.3.0+7597+67902674.ppc64le::freeradius:3.0, freeradius-3.0.20-3.module+el8.3.0+7597+67902674.s390x::freeradius:3.0 +47
Fixes 1 record
Priority LOW 37
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02222 · Published 2020-03-21 · Fixed CWE-662
