CVE-2019-11234
First published: Wed Apr 03 2019(Updated: )
A vulnerability was found in FreeRadius. An attacker can reflect the received scalar and element from the server in it's own commit message, and subsequently reflect the confirm value as well. This causes the adversary to successfully authenticate as the victim. Fortunately, the adversary will not posses the negotiated session key, meaning the adversary cannot actually perform any actions as this user.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/freeradius | <3.0.19 | 3.0.19 |
| debian/freeradius | 3.0.21+dfsg-2.2+deb11u1 3.2.1+dfsg-4+deb12u1 3.2.5+dfsg-3 | |
| FreeRADIUS | <3.0.19 | |
| Fedora | ||
| Red Hat Enterprise Linux | =7.0 | |
| Ubuntu Linux | =18.04 | |
| Ubuntu Linux | =18.10 | |
| Ubuntu Linux | =19.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
- https://access.redhat.com/errata/RHSA-2019:1131
- https://access.redhat.com/errata/RHSA-2019:1142
- https://bugzilla.redhat.com/show_bug.cgi?id=1695783
- https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://freeradius.org/security/
- https://papers.mathyvanhoef.com/dragonblood.pdf
- https://usn.ubuntu.com/3954-1/
- https://www.kb.cert.org/vuls/id/871675/
- http://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://github.com/FreeRADIUS/freeradius-server/commit/85497b5ff37ccb656895b826b88585898c209586
- https://github.com/FreeRADIUS/freeradius-server/commit/ab4c767099f263a7cd4109bcdca80ee74210a769
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1699420
- https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://launchpad.net/bugs/cve/CVE-2019-11234
- https://security-tracker.debian.org/tracker/CVE-2019-11234
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11234
- https://nvd.nist.gov/vuln/detail/CVE-2019-11234
- https://ubuntu.com/security/CVE-2019-11234
Frequently Asked Questions
What is the severity of CVE-2019-11234?
The severity of CVE-2019-11234 has been classified as moderate.
How do I fix CVE-2019-11234?
To fix CVE-2019-11234, upgrade FreeRadius to version 3.0.21 or later, or to any version 3.2.1 or greater.
What systems are affected by CVE-2019-11234?
CVE-2019-11234 affects FreeRadius versions up to 3.0.19 and several distributions including Red Hat, Debian, and Ubuntu.
Can CVE-2019-11234 allow attackers to impersonate users?
Yes, CVE-2019-11234 allows attackers to authenticate as legitimate users by reflecting commit messages.
Is CVE-2019-11234 a known vulnerability in FreeRadius?
Yes, CVE-2019-11234 is a recognized vulnerability that has been documented and identified in FreeRadius.
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-11234
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/launchpad-cve
- source/Launchpad
- collector/security-tracker-debian
- source/Debian
- agent/author
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-index
- package-manager/redhat
- package-manager/debian
- vendor/freeradius
- canonical/freeradius
- vendor/fedoraproject
- canonical/fedora
- vendor/redhat
- canonical/red hat enterprise linux
- version/red hat enterprise linux/7.0
- vendor/canonical
- canonical/ubuntu linux
- version/ubuntu linux/18.04
- version/ubuntu linux/18.10
- version/ubuntu linux/19.04