CVE-2019-17185

In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BNCTX instance to handle all handshakes. This mean multiple threads use the same BNCTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.

References

Affected packages

Git / github.com/freeradius/freeradius-server

Affected ranges

Type

GIT

Repo

https://github.com/freeradius/freeradius-server

Events

Introduced

580424ea12feeb5933f1aaac33fd5f9e2fa2ee60

Fixed

d94c953ab9602a238433ba18533111b845fd8e9e

Database specific

{
    "versions": [
        {
            "introduced": "3.0.0"
        },
        {
            "fixed": "3.0.20"
        }
    ]
}

Affected versions

release_3.*

release_3.0.8

Other

release_3_0_0

release_3_0_1

release_3_0_10

release_3_0_11

release_3_0_12

release_3_0_13

release_3_0_14

release_3_0_15

release_3_0_16

release_3_0_17

release_3_0_18

release_3_0_19

release_3_0_2

release_3_0_3

release_3_0_4_rc0

release_3_0_4_rc1

release_3_0_4_rc2

release_3_0_5

release_3_0_6

release_3_0_7

release_3_0_8

release_3_0_9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-17185.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    }
]