Security Update for freeradius
Summary
DLA-1064-1: freeradius - security update. Affects freeradius versions < 2.1.12+dfsg-1.2+deb7u2. Fixed in 2.1.12+dfsg-1.2+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRADIUS is an open source implementation of RADIUS, the IETF protocol for AAA (Authorization, Authentication, and Accounting). It is widely used for providing network access control and authentication services. The vulnerability in FreeRADIUS allows a remote attacker to cause a denial-of-service by crashing the application or potentially execute arbitrary code.
Vulnerability Detail
The vulnerability in FreeRADIUS is due to improper handling of memory when processing packets. This can be exploited by a remote attacker to crash the application or potentially execute arbitrary code. The impact of this vulnerability can range from service disruption to unauthorized access to sensitive information.
How To Fix
Minimum fixed version
2.1.12+dfsg-1.2+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade freeradiusTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in FreeRADIUS can be mitigated by upgrading to the latest version of the freeradius package. It is important to keep software up to date to ensure the security and stability of the system. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for freeradius →
FAQ
FreeRADIUS is an open source implementation of RADIUS, the IETF protocol for AAA (Authorization, Authentication, and Accounting). It is used for providing network access control and authentication services.
The vulnerability in FreeRADIUS can lead to a denial-of-service by crashing the application or potentially allow execution of arbitrary code. This can result in service disruption or unauthorized access to sensitive information.
To fix this vulnerability, it is recommended to upgrade the freeradius package to version 2.1.12+dfsg-1.2+deb7u2 or later. Instructions for upgrading can be found in the Debian LTS security advisories.
No specific workaround has been mentioned for this vulnerability.
More information about Debian LTS security advisories, including how to apply updates and frequently asked questions, can be found at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for freeradius.
