CVE-2019-11235
First published: Wed Apr 03 2019(Updated: )
A vulnerability was found in FreeRadius. An invalid curve attack allows an attacker to authenticate as any user (without knowing the password). The problem is that on the reception of an EAP-PWD Commit frame, FreeRADIUS doesn't verify whether the received elliptic curve point is valid.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Freeradius Freeradius | <3.0.19 | |
| Fedoraproject Fedora | ||
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux Eus | =7.6 | |
| Redhat Enterprise Linux Server | =7.0 | |
| Redhat Enterprise Linux Server Aus | =7.6 | |
| Redhat Enterprise Linux Server Tus | =7.6 | |
| Redhat Enterprise Linux Workstation | =7.0 | |
| Canonical Ubuntu Linux | =18.04 | |
| Canonical Ubuntu Linux | =18.10 | |
| Canonical Ubuntu Linux | =19.04 | |
| openSUSE Leap | =15.0 | |
| redhat/freeradius | <3.0.19 | 3.0.19 |
| debian/freeradius | 3.0.21+dfsg-2.2+deb11u1 3.2.1+dfsg-4+deb12u1 3.2.5+dfsg-3 |
Remedy
https://github.com/FreeRADIUS/freeradius-server/commit/85497b5ff37ccb656895b826b88585898c209586
Remedy
https://github.com/FreeRADIUS/freeradius-server/commit/ab4c767099f263a7cd4109bcdca80ee74210a769
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html
- http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
- https://access.redhat.com/errata/RHSA-2019:1131
- https://access.redhat.com/errata/RHSA-2019:1142
- https://bugzilla.redhat.com/show_bug.cgi?id=1695748
- https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://freeradius.org/security/
- https://papers.mathyvanhoef.com/dragonblood.pdf
- https://usn.ubuntu.com/3954-1/
- https://www.kb.cert.org/vuls/id/871675/
- http://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://github.com/FreeRADIUS/freeradius-server/commit/85497b5ff37ccb656895b826b88585898c209586
- https://github.com/FreeRADIUS/freeradius-server/commit/ab4c767099f263a7cd4109bcdca80ee74210a769
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1699415
- https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
- https://launchpad.net/bugs/cve/CVE-2019-11235
- https://security-tracker.debian.org/tracker/CVE-2019-11235
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11235
- https://nvd.nist.gov/vuln/detail/CVE-2019-11235
- https://ubuntu.com/security/CVE-2019-11235
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/weakness
- agent/severity
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-11235
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/description
- collector/launchpad-cve
- source/Launchpad
- collector/security-tracker-debian
- source/Debian
- collector/nvd-cve
- source/NVD
- agent/references
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- collector/usn-cve
- source/Ubuntu
- vendor/freeradius
- canonical/freeradius freeradius
- vendor/fedoraproject
- canonical/fedoraproject fedora
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- canonical/redhat enterprise linux eus
- version/redhat enterprise linux eus/7.6
- canonical/redhat enterprise linux server
- version/redhat enterprise linux server/7.0
- canonical/redhat enterprise linux server aus
- version/redhat enterprise linux server aus/7.6
- canonical/redhat enterprise linux server tus
- version/redhat enterprise linux server tus/7.6
- canonical/redhat enterprise linux workstation
- version/redhat enterprise linux workstation/7.0
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/18.04
- version/canonical ubuntu linux/18.10
- version/canonical ubuntu linux/19.04
- vendor/opensuse
- canonical/opensuse leap
- version/opensuse leap/15.0
- package-manager/redhat
- package-manager/debian