CVE-2019-17185

Published: Mar 21, 2020Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.

Affected (2)

Products: Freeradius: Freeradius · Opensuse: Leap

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freeradius Freeradius	From 3.0.0 to 3.0.20

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1

Related CWEs

Improper Synchronization

The product utilizes multiple threads or processes to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.

References (6)

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://freeradius.org/security/

Source: cve@mitre.org

Vendor Advisory

https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20

Source: cve@mitre.org

Release NotesThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://freeradius.org/security/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

Timeline

No history available yet.