ID CVE-2017-9148
Summary The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.
References
Vulnerable Configurations
  • FreeRADIUS 2.1.1
    cpe:2.3:a:freeradius:freeradius:2.1.1
  • FreeRADIUS 2.1.2
    cpe:2.3:a:freeradius:freeradius:2.1.2
  • FreeRADIUS 2.1.3
    cpe:2.3:a:freeradius:freeradius:2.1.3
  • FreeRADIUS 2.1.4
    cpe:2.3:a:freeradius:freeradius:2.1.4
  • FreeRADIUS 2.1.6
    cpe:2.3:a:freeradius:freeradius:2.1.6
  • FreeRADIUS 2.1.7
    cpe:2.3:a:freeradius:freeradius:2.1.7
  • cpe:2.3:a:freeradius:freeradius:3.0.0
    cpe:2.3:a:freeradius:freeradius:3.0.0
  • cpe:2.3:a:freeradius:freeradius:3.0.1
    cpe:2.3:a:freeradius:freeradius:3.0.1
  • FreeRADIUS 3.0.2
    cpe:2.3:a:freeradius:freeradius:3.0.2
  • FreeRADIUS 3.0.3
    cpe:2.3:a:freeradius:freeradius:3.0.3
  • FreeRADIUS 3.0.4
    cpe:2.3:a:freeradius:freeradius:3.0.4
  • FreeRADIUS 3.0.5
    cpe:2.3:a:freeradius:freeradius:3.0.5
  • FreeRADIUS 3.0.6
    cpe:2.3:a:freeradius:freeradius:3.0.6
  • FreeRADIUS 3.0.7
    cpe:2.3:a:freeradius:freeradius:3.0.7
  • FreeRADIUS 3.0.8
    cpe:2.3:a:freeradius:freeradius:3.0.8
  • cpe:2.3:a:freeradius:freeradius:3.0.9
    cpe:2.3:a:freeradius:freeradius:3.0.9
  • cpe:2.3:a:freeradius:freeradius:3.1.0
    cpe:2.3:a:freeradius:freeradius:3.1.0
  • cpe:2.3:a:freeradius:freeradius:3.1.1
    cpe:2.3:a:freeradius:freeradius:3.1.1
  • cpe:2.3:a:freeradius:freeradius:3.1.2
    cpe:2.3:a:freeradius:freeradius:3.1.2
  • cpe:2.3:a:freeradius:freeradius:3.1.3
    cpe:2.3:a:freeradius:freeradius:3.1.3
  • cpe:2.3:a:freeradius:freeradius:4.0.0
    cpe:2.3:a:freeradius:freeradius:4.0.0
CVSS
Base: 7.5
Impact:
Exploitability:
CWE CWE-287
CAPEC
  • Authentication Abuse
    An attacker obtains unauthorized access to an application, service or device either through knowledge of the inherent weaknesses of an authentication mechanism, or by exploiting a flaw in the authentication scheme's implementation. In such an attack an authentication mechanism is functioning but a carefully controlled sequence of events causes the mechanism to grant access to the attacker. This attack may exploit assumptions made by the target's authentication procedures, such as assumptions regarding trust relationships or assumptions regarding the generation of secret values. This attack differs from Authentication Bypass attacks in that Authentication Abuse allows the attacker to be certified as a valid user through illegitimate means, while Authentication Bypass allows the user to access protected material without ever being certified as an authenticated user. This attack does not rely on prior sessions established by successfully authenticating users, as relied upon for the "Exploitation of Session Variables, Resource IDs and other Trusted Credentials" attack patterns.
  • Exploiting Trust in Client (aka Make the Client Invisible)
    An attack of this type exploits a programs' vulnerabilities in client/server communication channel authentication and data integrity. It leverages the implicit trust a server places in the client, or more importantly, that which the server believes is the client. An attacker executes this type of attack by placing themselves in the communication channel between client and server such that communication directly to the server is possible where the server believes it is communicating only with a valid client. There are numerous variations of this type of attack.
  • Utilizing REST's Trust in the System Resource to Register Man in the Middle
    This attack utilizes a REST(REpresentational State Transfer)-style applications' trust in the system resources and environment to place man in the middle once SSL is terminated. Rest applications premise is that they leverage existing infrastructure to deliver web services functionality. An example of this is a Rest application that uses HTTP Get methods and receives a HTTP response with an XML document. These Rest style web services are deployed on existing infrastructure such as Apache and IIS web servers with no SOAP stack required. Unfortunately from a security standpoint, there frequently is no interoperable identity security mechanism deployed, so Rest developers often fall back to SSL to deliver security. In large data centers, SSL is typically terminated at the edge of the network - at the firewall, load balancer, or router. Once the SSL is terminated the HTTP request is in the clear (unless developers have hashed or encrypted the values, but this is rare). The attacker can utilize a sniffer such as Wireshark to snapshot the credentials, such as username and password that are passed in the clear once SSL is terminated. Once the attacker gathers these credentials, they can submit requests to the web service provider just as authorized user do. There is not typically an authentication on the client side, beyond what is passed in the request itself so once this is compromised, then this is generally sufficient to compromise the service's authentication scheme.
  • Man in the Middle Attack
    This type of attack targets the communication between two components (typically client and server). The attacker places himself in the communication channel between the two components. Whenever one component attempts to communicate with the other (data flow, authentication challenges, etc.), the data first goes to the attacker, who has the opportunity to observe or alter it, and it is then passed on to the other component as if it was never intercepted. This interposition is transparent leaving the two compromised components unaware of the potential corruption or leakage of their communications. The potential for Man-in-the-Middle attacks yields an implicit lack of trust in communication or identify between two components.
nessus via4
  • NASL family Red Hat Local Security Checks
    NASL id REDHAT-RHSA-2017-1581.NASL
    description An update for freeradius is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es) : * An authentication bypass flaw was found in the way the EAP module in FreeRADIUS handled TLS session resumption. A remote unauthenticated attacker could potentially use this flaw to bypass the inner authentication check in FreeRADIUS by resuming an older unauthenticated TLS session. (CVE-2017-9148)
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 101078
    published 2017-06-28
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101078
    title RHEL 7 : freeradius (RHSA-2017:1581)
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2017-1777-1.NASL
    description This update for freeradius-server fixes the following issues : - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. (bnc#1041445) - CVE-2015-4680: Add a configuration option to allow checking of all intermediate certificates for revocations. (bnc#935573) The following non security issue was fixed : - Cannot create table radpostauth because of deprecated TIMESTAMP(14) syntax. (bsc#912873) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-30
    plugin id 101229
    published 2017-07-05
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101229
    title SUSE SLES11 Security Update : freeradius-server (SUSE-SU-2017:1777-1)
  • NASL family Debian Local Security Checks
    NASL id DEBIAN_DLA-977.NASL
    description Several issues were discovered in FreeRADIUS, a high-performance and highly configurable RADIUS server. CVE-2014-2015 A stack-based buffer overflow was found in the normify function in the rlm_pap module, which can be attacked by existing users to cause denial of service or other issues. CVE-2015-4680 It was discovered that freeradius failed to check revocation of intermediate CA certificates, thus accepting client certificates issued by revoked certificates from intermediate CAs. Note that to enable checking of intermediate CA certificates, it is necessary to enable the check_all_crl option of the EAP TLS section in eap.conf. This is only necessary for servers using certificates signed by intermediate CAs. Servers that use self-signed CAs are unaffected. CVE-2017-9148 The TLS session cache fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS. For Debian 7 'Wheezy', these problems have been fixed in version 2.1.12+dfsg-1.2+deb7u1. We recommend that you upgrade your freeradius packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-07-09
    plugin id 100623
    published 2017-06-06
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=100623
    title Debian DLA-977-1 : freeradius security update
  • NASL family Virtuozzo Local Security Checks
    NASL id VIRTUOZZO_VZLSA-2017-1581.NASL
    description An update for freeradius is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es) : * An authentication bypass flaw was found in the way the EAP module in FreeRADIUS handled TLS session resumption. A remote unauthenticated attacker could potentially use this flaw to bypass the inner authentication check in FreeRADIUS by resuming an older unauthenticated TLS session. (CVE-2017-9148) Note that Tenable Network Security has attempted to extract the preceding description block directly from the corresponding Red Hat security advisory. Virtuozzo provides no description for VZLSA advisories. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-14
    plugin id 101534
    published 2017-07-14
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101534
    title Virtuozzo 7 : freeradius / freeradius-devel / freeradius-doc / etc (VZLSA-2017-1581)
  • NASL family FreeBSD Local Security Checks
    NASL id FREEBSD_PKG_673DCE4646D011E7A5390050569F7E80.NASL
    description Stefan Winter reports : The TLS session cache in FreeRADIUS before 3.0.14 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.
    last seen 2019-02-21
    modified 2018-11-21
    plugin id 100581
    published 2017-06-02
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=100581
    title FreeBSD : FreeRADIUS -- TLS resumption authentication bypass (673dce46-46d0-11e7-a539-0050569f7e80)
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2017-1135.NASL
    description According to the version of the freeradius package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.(CVE-2017-9148) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-14
    plugin id 102222
    published 2017-08-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=102222
    title EulerOS 2.0 SP2 : freeradius (EulerOS-SA-2017-1135)
  • NASL family SuSE Local Security Checks
    NASL id OPENSUSE-2017-709.NASL
    description This update for freeradius-server fixes the following issues : - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. (boo#1041445)
    last seen 2019-02-21
    modified 2018-01-26
    plugin id 100882
    published 2017-06-20
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=100882
    title openSUSE Security Update : freeradius-server (openSUSE-2017-709)
  • NASL family Ubuntu Local Security Checks
    NASL id UBUNTU_USN-3316-1.NASL
    description Stefan Winter and Lubos Pavlicek discovered that FreeRADIUS incorrectly handled the TLS session cache. A remote attacker could possibly use this issue to bypass authentication by resuming an unauthenticated session. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-12-01
    plugin id 100678
    published 2017-06-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=100678
    title Ubuntu 17.04 : freeradius vulnerability (USN-3316-1)
  • NASL family Scientific Linux Local Security Checks
    NASL id SL_20170628_FREERADIUS_ON_SL7_X.NASL
    description Security Fix(es) : - An authentication bypass flaw was found in the way the EAP module in FreeRADIUS handled TLS session resumption. A remote unauthenticated attacker could potentially use this flaw to bypass the inner authentication check in FreeRADIUS by resuming an older unauthenticated TLS session. (CVE-2017-9148)
    last seen 2019-02-21
    modified 2018-12-27
    plugin id 101104
    published 2017-06-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101104
    title Scientific Linux Security Update : freeradius on SL7.x x86_64
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2017-7EE5C17024.NASL
    description Upgrade FreeRADIUS to upstream v3.0.14 release. The release includes fixes for various issues, including security issues, one of which is CVE-2017-9148. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-02-02
    plugin id 101666
    published 2017-07-17
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101666
    title Fedora 26 : freeradius (2017-7ee5c17024)
  • NASL family Oracle Linux Local Security Checks
    NASL id ORACLELINUX_ELSA-2017-1581.NASL
    description From Red Hat Security Advisory 2017:1581 : An update for freeradius is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es) : * An authentication bypass flaw was found in the way the EAP module in FreeRADIUS handled TLS session resumption. A remote unauthenticated attacker could potentially use this flaw to bypass the inner authentication check in FreeRADIUS by resuming an older unauthenticated TLS session. (CVE-2017-9148)
    last seen 2019-02-21
    modified 2018-07-24
    plugin id 101097
    published 2017-06-29
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101097
    title Oracle Linux 7 : freeradius (ELSA-2017-1581)
  • NASL family Gentoo Local Security Checks
    NASL id GENTOO_GLSA-201706-27.NASL
    description The remote host is affected by the vulnerability described in GLSA-201706-27 (FreeRADIUS: Security bypass) It was discovered that the implementation of TTLS and PEAP in FreeRADIUS skips inner authentication when it handles a resumed TLS connection. The affected versions of FreeRADIUS fails to reliably prevent the resumption of unauthenticated sessions unless the TLS session cache is disabled completely. Impact : An unauthenticated remote user can bypass authentication by starting a session, and then resuming an unauthenticated TLS session before inner authentication has been completed successfully. Workaround : Set “enabled = no” in the cache subsection of eap module settings to disable TLS session caching.
    last seen 2019-02-21
    modified 2018-01-26
    plugin id 101073
    published 2017-06-28
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101073
    title GLSA-201706-27 : FreeRADIUS: Security bypass
  • NASL family SuSE Local Security Checks
    NASL id SUSE_SU-2017-1705-1.NASL
    description This update for freeradius-server fixes the following issues: Security issue fixed : - CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. (bsc#1041445) Non security issue fixed : - Fix case insensitive matching in compiled regular expressions (bsc#1027243) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-30
    plugin id 101081
    published 2017-06-28
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101081
    title SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2017:1705-1)
  • NASL family Fedora Local Security Checks
    NASL id FEDORA_2017-E698BBA980.NASL
    description Upgrade FreeRADIUS to upstream v3.0.14 release. The release includes fixes for various issues, including security issues, one of which is CVE-2017-9148. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-02-02
    plugin id 100735
    published 2017-06-12
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=100735
    title Fedora 25 : freeradius (2017-e698bba980)
  • NASL family Huawei Local Security Checks
    NASL id EULEROS_SA-2017-1134.NASL
    description According to the version of the freeradius package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.(CVE-2017-9148) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen 2019-02-21
    modified 2018-11-14
    plugin id 102221
    published 2017-08-08
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=102221
    title EulerOS 2.0 SP1 : freeradius (EulerOS-SA-2017-1134)
  • NASL family CentOS Local Security Checks
    NASL id CENTOS_RHSA-2017-1581.NASL
    description An update for freeradius is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es) : * An authentication bypass flaw was found in the way the EAP module in FreeRADIUS handled TLS session resumption. A remote unauthenticated attacker could potentially use this flaw to bypass the inner authentication check in FreeRADIUS by resuming an older unauthenticated TLS session. (CVE-2017-9148)
    last seen 2019-02-21
    modified 2018-11-10
    plugin id 101119
    published 2017-06-30
    reporter Tenable
    source https://www.tenable.com/plugins/index.php?view=single&id=101119
    title CentOS 7 : freeradius (CESA-2017:1581)
redhat via4
advisories
bugzilla
id 1456697
title CVE-2017-9148 freeradius: TLS resumption authentication bypass
oval
AND
  • OR
    • comment Red Hat Enterprise Linux 7 Client is installed
      oval oval:com.redhat.rhsa:tst:20140675001
    • comment Red Hat Enterprise Linux 7 Server is installed
      oval oval:com.redhat.rhsa:tst:20140675002
    • comment Red Hat Enterprise Linux 7 Workstation is installed
      oval oval:com.redhat.rhsa:tst:20140675003
    • comment Red Hat Enterprise Linux 7 ComputeNode is installed
      oval oval:com.redhat.rhsa:tst:20140675004
  • OR
    • AND
      • comment freeradius is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581009
      • comment freeradius is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326006
    • AND
      • comment freeradius-devel is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581027
      • comment freeradius-devel is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20171581028
    • AND
      • comment freeradius-doc is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581005
      • comment freeradius-doc is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20171581006
    • AND
      • comment freeradius-krb5 is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581013
      • comment freeradius-krb5 is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326020
    • AND
      • comment freeradius-ldap is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581011
      • comment freeradius-ldap is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326014
    • AND
      • comment freeradius-mysql is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581019
      • comment freeradius-mysql is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326016
    • AND
      • comment freeradius-perl is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581007
      • comment freeradius-perl is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326008
    • AND
      • comment freeradius-postgresql is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581015
      • comment freeradius-postgresql is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326012
    • AND
      • comment freeradius-python is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581025
      • comment freeradius-python is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326022
    • AND
      • comment freeradius-sqlite is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581017
      • comment freeradius-sqlite is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20171581018
    • AND
      • comment freeradius-unixODBC is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581021
      • comment freeradius-unixODBC is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326010
    • AND
      • comment freeradius-utils is earlier than 0:3.0.4-8.el7_3
        oval oval:com.redhat.rhsa:tst:20171581023
      • comment freeradius-utils is signed with Red Hat redhatrelease2 key
        oval oval:com.redhat.rhsa:tst:20121326018
rhsa
id RHSA-2017:1581
released 2017-06-28
severity Important
title RHSA-2017:1581: freeradius security update (Important)
rpms
  • freeradius-0:3.0.4-8.el7_3
  • freeradius-devel-0:3.0.4-8.el7_3
  • freeradius-doc-0:3.0.4-8.el7_3
  • freeradius-krb5-0:3.0.4-8.el7_3
  • freeradius-ldap-0:3.0.4-8.el7_3
  • freeradius-mysql-0:3.0.4-8.el7_3
  • freeradius-perl-0:3.0.4-8.el7_3
  • freeradius-postgresql-0:3.0.4-8.el7_3
  • freeradius-python-0:3.0.4-8.el7_3
  • freeradius-sqlite-0:3.0.4-8.el7_3
  • freeradius-unixODBC-0:3.0.4-8.el7_3
  • freeradius-utils-0:3.0.4-8.el7_3
refmap via4
bid 98734
gentoo GLSA-201706-27
misc
sectrack 1038576
Last major update 29-05-2017 - 13:29
Published 29-05-2017 - 13:29
Last modified 04-01-2018 - 21:31
Back to Top