Authentication bypass in FreeRADIUS

Published: 2019-04-25 10:35:34 | Updated: 2019-04-25
Severity Medium
Patch available YES
Number of vulnerabilities 2
CVE ID CVE-2019-11234
CVE-2019-11235
CVSSv3 6.6 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C]
6.6 [CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C]
CWE ID CWE-287
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Public exploit code for vulnerability #2 is available.
Vulnerable software FreeRADIUS
Vulnerable software versions FreeRADIUS 3.0.0
FreeRADIUS 3.0.0.0
FreeRADIUS 3.0.0.1

Show more

Vendor URL FreeRADIUS Server Project

Security Advisory

1) Improper Authentication

Description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to an error related to processing authentication tokens. A remote attacker can execute a reflection attack and bypass authentication process.

This vulnerability was dubbed "Dragonblood".

Remediation

Install updates from vendor's website.

External links

https://bugzilla.redhat.com/show_bug.cgi?id=1695783
https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
https://freeradius.org/security/
https://papers.mathyvanhoef.com/dragonblood.pdf
https://usn.ubuntu.com/3954-1/
https://www.kb.cert.org/vuls/id/871675/

2) Improper Authentication

Description

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to FreeRadius mishandles secure checks when preforming user authentication process. The related checks refer to mechanisms, which ensures that "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used". A remote attacker can bypass authentication process.

Remediation

Install updates from vendor's website.

External links

https://bugzilla.redhat.com/show_bug.cgi?id=1695748
https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19
https://freeradius.org/security/
https://papers.mathyvanhoef.com/dragonblood.pdf
https://usn.ubuntu.com/3954-1/
https://www.kb.cert.org/vuls/id/871675/

Back to List