CVE-2019-13456
First published: Tue Aug 06 2019(Updated: )
In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Freeradius Freeradius | >=3.0.0<=3.0.19 | |
| Linux Linux kernel | ||
| Redhat Enterprise Linux | =7.0 | |
| Redhat Enterprise Linux | =8.0 | |
| openSUSE Leap | =15.1 |
Remedy
https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1737663
- https://freeradius.org/security/
- https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa
- https://wpa3.mathyvanhoef.com
- https://wpa3.mathyvanhoef.com/#new
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1737664
- https://access.redhat.com/errata/RHSA-2020:1672
- https://access.redhat.com/security/cve/cve-2019-13456
- https://access.redhat.com/errata/RHSA-2020:3984
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2019-13456
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/freeradius
- canonical/freeradius freeradius
- version/freeradius freeradius/3.0.0
- version/freeradius freeradius/3.0.19
- vendor/linux
- canonical/linux linux kernel
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/7.0
- version/redhat enterprise linux/8.0
- vendor/opensuse
- canonical/opensuse leap
- version/opensuse leap/15.1