REDHAT-BUG-2078487: Medium severity FreeRADIUS freeradius vulnerability
Published Apr 25, 2022
·Updated
A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.
References:
https://freeradius.org/security/
Upstream fix:
https://github.com/FreeRADIUS/freeradius-server/commit/0ec2b39d260e
Affected Software
1 affected component
FreeRADIUS freeradius
Event History
Apr 25, 2022
Data Sourced
via Red Hat·01:05 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Who can trigger the crash?
A malicious RADIUS client or a malicious home server can trigger it by sending a malformed abinary attribute to the FreeRADIUS server.
2
What is the impact of successful exploitation?
Successful exploitation can cause the FreeRADIUS server to crash, creating a denial-of-service condition.