CVE-2019-11234
First published: Wed Apr 03 2019(Updated: )
A vulnerability was found in FreeRadius. An attacker can reflect the received scalar and element from the server in it's own commit message, and subsequently reflect the confirm value as well. This causes the adversary to successfully authenticate as the victim. Fortunately, the adversary will not posses the negotiated session key, meaning the adversary cannot actually perform any actions as this user.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Freeradius Freeradius | <3.0.19 | |
| Fedoraproject Fedora | ||
| Redhat Enterprise Linux | =7.0 | |
| Canonical Ubuntu Linux | =18.04 | |
| Canonical Ubuntu Linux | =18.10 | |
| Canonical Ubuntu Linux | =19.04 | |
| redhat/freeradius | <3.0.19 | 3.0.19 |
| debian/freeradius | 3.0.21+dfsg-2.2+deb11u1 3.2.1+dfsg-4+deb12u1 3.2.5+dfsg-3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
- https://access.redhat.com/errata/RHSA-2019:1131
- https://access.redhat.com/errata/RHSA-2019:1142
- https://bugzilla.redhat.com/show_bug.cgi?id=1695783
- https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://freeradius.org/security/
- https://papers.mathyvanhoef.com/dragonblood.pdf
- https://usn.ubuntu.com/3954-1/
- https://www.kb.cert.org/vuls/id/871675/
- http://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://github.com/FreeRADIUS/freeradius-server/commit/85497b5ff37ccb656895b826b88585898c209586
- https://github.com/FreeRADIUS/freeradius-server/commit/ab4c767099f263a7cd4109bcdca80ee74210a769
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1699420
- https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://launchpad.net/bugs/cve/CVE-2019-11234
- https://security-tracker.debian.org/tracker/CVE-2019-11234
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11234
- https://nvd.nist.gov/vuln/detail/CVE-2019-11234
- https://ubuntu.com/security/CVE-2019-11234
- collector/nvd-index
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-11234
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/description
- collector/launchpad-cve
- source/Launchpad
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- source/NVD
- agent/references
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- collector/usn-cve
- source/Ubuntu
- vendor/freeradius
- canonical/freeradius freeradius
- vendor/fedoraproject
- canonical/fedoraproject fedora
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/18.04
- version/canonical ubuntu linux/18.10
- version/canonical ubuntu linux/19.04
- package-manager/redhat
- package-manager/debian