Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 620
Alerts This Week
Warning Icon 1 620

Ubuntu 19.04: USN-3954-1 Moderate: FreeRADIUS Authentication Bypass

ubuntu
Calendar Grey April 24, 2019
Dist Ubuntu Esm H88
Ubuntu systems running FreeRADIUS might experience vulnerabilities leading to potential authentication bypass. It is critical to apply updates immediately to resolve these issues.
FreeRADIUS could be made to bypass authentication if it received a specially crafted input.

Summary

FreeRADIUS could be made to bypass authentication if it received a

specially crafted input.

Software Description:

- freeradius: high-performance and highly configurable RADIUS server

Details:

It was discovered that FreeRADIUS incorrectly handled certain inputs.

An attacker could possibly use this issue to bypass authentication.

(CVE-2019-11234, CVE-2019-11235)

Topics%20covered

Topics Covered

security advisory software update Ubuntu authentication bypass FreeRADIUS

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
  freeradius                      3.0.17+dfsg-1ubuntu2.1

Ubuntu 18.10:
  freeradius                      3.0.16+dfsg-3ubuntu1.1

Ubuntu 18.04 LTS:
  freeradius                      3.0.16+dfsg-1ubuntu3.1

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3954-1

  CVE-2019-11234, CVE-2019-11235

April 24, 2019

Topics%20covered

Topics Covered

security advisory software update Ubuntu authentication bypass FreeRADIUS

Package Information

  https://launchpad.net/ubuntu/+source/freeradius/3.0.17+dfsg-1ubuntu2.1
  https://launchpad.net/ubuntu/+source/freeradius/3.0.16+dfsg-3ubuntu1.1
  https://launchpad.net/ubuntu/+source/freeradius/3.0.16+dfsg-1ubuntu3.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.