RHSA-2024:4913

csafUSredhat_csaf

Red Hat Security Advisory: freeradius:3.0 security update

view advisory published 2024-07-30

An update for the freeradius:3.0 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2024-3596UScritical9.0OT highExploit
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any ot…
02

references

External citations — patches, advisories, analysis.

03

remediations (48)

  • Fixedfreeradius-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.src (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-debugsource-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-devel-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-doc-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-krb5-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-krb5-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-ldap-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-ldap-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-mysql-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-mysql-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-perl-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-perl-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-postgresql-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-postgresql-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-rest-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-rest-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-sqlite-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-sqlite-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-unixODBC-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-unixODBC-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-utils-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Fixedfreeradius-utils-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2024:4913
  • Workaroundfreeradius-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.src (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-debugsource-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-devel-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-doc-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-krb5-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-krb5-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-ldap-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-ldap-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-mysql-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-mysql-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-perl-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-perl-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-postgresql-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-postgresql-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-rest-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-rest-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-sqlite-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-sqlite-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-unixODBC-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-unixODBC-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-utils-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

  • Workaroundfreeradius-utils-debuginfo-0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64 (freeradius:3.0) as a component of Red Hat Enterprise Linux AppStream AUS (v. 8.2)

    Disable the use of RADIUS/UDP and RADIUS/TCP. RADIUS/TLS or RADIUS/DTLS should be used.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan