Alpine/freeradius: critical 9.8

FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.

Action: Upgrade freeradius to 3.0.17-r5 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2019-11234#Alpine:v3.9/freeradius
• https://security.alpinelinux.org/vuln/CVE-2019-11234

published 2019-04-22T11:29:03.330Z · modified 2026-09-21T06:17:52.457278672Z · JSON