tocsin

Debian/freeradius: medium 6.5

In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks info

Action: Upgrade freeradius to 3.0.20+dfsg-1 or later.

Affected

introducedfixedlast affected
03.0.20+dfsg-1-

Fixed versions

3.0.20+dfsg-1

Sources

published · modified · JSON