Every CVE Search/ Get API key

CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure...

6.4 MediumFix availableDisputed

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.34%Down 0.7 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.4

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Record
CVE-2019-10143
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-266, CWE-250
Updated
2026-11-02
EUVDEUVD-2019-2181 6.4

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Record
EUVD-2019-2181
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-5x22-w79m-34gq 7.0

It was discovered freeradius up to and including version 3.0.19 does not correctly configure...

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user.

Record
GHSA-5x22-w79m-34gq
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-250, CWE-362
Updated
2026-11-02
NVD 7.0

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Record
CVE-2019-10143
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-250, CWE-266, CWE-362
Updated
2026-11-02
OSVALPINE-CVE-2019-10143 7.0

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Record
ALPINE-CVE-2019-10143
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 7.0

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Record
CVE-2019-10143
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVDEBIAN-CVE-2019-10143 7.0

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Record
DEBIAN-CVE-2019-10143
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2019:3353 6.4

Red Hat Security Advisory: freeradius:3.0 security and bug fix update

Record
RHSA-2019:3353
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3984 7.5

Red Hat Security Advisory: freeradius security and bug fix update

Record
RHSA-2020:3984
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-10143 7.0

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."

Record
UBUNTU-CVE-2019-10143
CVSS 3.1
7.0 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
6.4 MediumCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2020-0007 No score

Updated freeradius packages fix security vulnerabilities

Updated freeradius packages fix security vulnerabilities:

It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user (CVE-2019-10143).

An information leak was discovered in the implementation of EAP-pwd in freeradius. An attacker could initiate several EAP-pwd handshakes to leak information, which can then be used to recover the user's WiFi password by performing dictionary and brute-force attacks (CVE-2019-13456).

Denial of service issues due to multithreaded BN_CTX access (CVE-2019-17185).

Record
MGASA-2020-0007
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freeradius
Alpine:v3.10
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.11
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.12
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.13
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.14
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.15
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.16
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.17
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.18
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.19
 before 3.0.19-r3
3.0.19-r3
Show 69 moreShow less
Affected packages
PackageAffectedFixed
freeradius
Alpine:v3.20
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.21
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.22
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.23
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.24
 before 3.0.19-r3
3.0.19-r3
freeradius
Alpine:v3.7
 before 3.0.17-r5
3.0.17-r5
freeradius
Alpine:v3.8
 before 3.0.17-r4
3.0.17-r4
freeradius
Alpine:v3.9
 before 3.0.17-r6
3.0.17-r6
freeradius
Debian:12
 All versions, plus listed versions
3.2.1+dfsg-43.2.1+dfsg-4+deb12u13.2.10+dfsg-13.2.10+dfsg-23.2.2+dfsg-1~exp1
Show 13 moreShow less
3.2.3+dfsg-13.2.3+dfsg-23.2.5+dfsg-13.2.5+dfsg-23.2.5+dfsg-33.2.6+dfsg-13.2.6+dfsg-23.2.6+dfsg-2~bpo12+13.2.6+dfsg-33.2.7+dfsg-13.2.7+dfsg-1~bpo12+13.2.7+dfsg-23.2.8+dfsg-1
 None known
freeradius
Debian:13
 before 3.2.6+dfsg-3
3.2.6+dfsg-3
freeradius
Debian:14
 before 3.2.6+dfsg-3
3.2.6+dfsg-3
freeradius
Mageia:7
 before 3.0.20-1.mga7
3.0.20-1.mga7
freeradius
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-devel
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-doc
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-krb5
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-krb5-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-ldap
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-mysql
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-perl
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-perl-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-postgresql
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-postgresql-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-rest
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-rest-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-sqlite
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-sqlite-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-unixODBC
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-unixODBC-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-utils
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:3.0.17-6.module+el8.1.0+3392+9bd8939b
0:3.0.17-6.module+el8.1.0+3392+9bd8939b
freeradius
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-devel
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-doc
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-krb5
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-ldap
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-mysql
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-perl
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-postgresql
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-python
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-sqlite
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-unixODBC
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-utils
Red Hat:enterprise_linux:7::server
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-doc
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-krb5
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-ldap
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-mysql
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-perl
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-postgresql
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-python
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-sqlite
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-unixODBC
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius-utils
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.13-15.el7
0:3.0.13-15.el7
freeradius
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.1.12+dfsg-1.3ubuntu52.2.8+dfsg-0.12.2.8+dfsg-0.1build12.2.8+dfsg-0.1build22.2.8+dfsg-0.1ubuntu0.12.2.8+dfsg-0.1ubuntu0.1+esm1
 None known
freeradius
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.0.15+dfsg-1ubuntu23.0.16+dfsg-1ubuntu23.0.16+dfsg-1ubuntu33.0.16+dfsg-1ubuntu3.13.0.16+dfsg-1ubuntu3.2
 None known
freeradius
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.0.19+dfsg-33.0.19+dfsg-3build13.0.20+dfsg-13.0.20+dfsg-33.0.20+dfsg-3build1
Show 4 moreShow less
3.0.20+dfsg-3ubuntu0.13.0.20+dfsg-3ubuntu0.23.0.20+dfsg-3ubuntu0.43.0.20+dfsg-3ubuntu0.5
 None known
freeradius
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.0.21+dfsg-2.23.0.21+dfsg-33.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu23.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu33.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.13.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.23.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.33.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.4
 None known
freeradius
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.2.3+dfsg-23.2.3+dfsg-2build23.2.3+dfsg-2build63.2.3+dfsg-2build73.2.5+dfsg-3~ubuntu24.04.13.2.5+dfsg-3~ubuntu24.04.23.2.5+dfsg-3~ubuntu24.04.3
 None known
freeradius
Ubuntu:25.10
 All versions, plus listed versions
3.2.7+dfsg-1ubuntu13.2.7+dfsg-1ubuntu2
 None known
freeradius
Ubuntu:26.10
 All versions, plus listed versions
3.2.8+dfsg-1ubuntu23.2.8+dfsg-1ubuntu43.2.10+dfsg-1ubuntu1
 None known
freeradius
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.2.7+dfsg-1ubuntu23.2.8+dfsg-1ubuntu13.2.8+dfsg-1ubuntu2
 None known

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-10143 is a medium vulnerability (CVSS 6.4) in Freeradius, published May 24, 2019. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 28th percentile. Fixed in freeradius 3.0.19-r3.

References

Show 35 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open