Every CVE Search/ Get API key

CVE-2022-41859

In freeradius, the EAP-PWD function compute_password_element() leaks information about the...

7.5 HighFix available

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.89%Unchanged since Jan 18, 2023
90%50%10%1%

What each source reports

NVD Score used 7.5

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
CVE-2022-41859
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200, CWE-522
Updated
2026-11-02
CVE List 7.5

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
CVE-2022-41859
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
EUVDEUVD-2022-45023 7.5

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
EUVD-2022-45023
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-cmvm-c7qf-pmc5 7.5

In freeradius, the EAP-PWD function compute_password_element() leaks information about the...

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
GHSA-cmvm-c7qf-pmc5
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200, CWE-522
Updated
2026-11-02
OSVALPINE-CVE-2022-41859 7.5

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
ALPINE-CVE-2022-41859
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-03
OSV 7.5

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
CVE-2022-41859
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
Show 19 moreShow less
OSVOESA-2023-1953 7.5

freeradius security update

Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service.

Security Fix(es):

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.(CVE-2022-41859)

Record
OESA-2023-1953
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2023-1954 7.5

freeradius security update

Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service.

Security Fix(es):

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.(CVE-2022-41859)

Record
OESA-2023-1954
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2023-1955 7.5

freeradius security update

Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service.

Security Fix(es):

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.(CVE-2022-41859)

Record
OESA-2023-1955
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVOESA-2023-1956 7.5

freeradius security update

Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service.

Security Fix(es):

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.(CVE-2022-41859)

Record
OESA-2023-1956
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVRHSA-2023:2166 7.5

Red Hat Security Advisory: freeradius security and bug fix update

Record
RHSA-2023:2166
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:2870 7.5

Red Hat Security Advisory: freeradius:3.0 security update

Record
RHSA-2023:2870
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:2870 7.5

Moderate: freeradius:3.0 security update

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

  • freeradius: Information leakage in EAP-PWD (CVE-2022-41859)

  • freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)

  • freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.8 Release Notes linked from the References section.

Record
RLSA-2023:2870
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2022-41859 7.5

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
UBUNTU-CVE-2022-41859
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02
OSVALSA-2023:2166 No score

Moderate: freeradius security and bug fix update

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

  • freeradius: Information leakage in EAP-PWD (CVE-2022-41859)
  • freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)
  • freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2166
Updated
2026-11-02
OSVALSA-2023:2870 No score

Moderate: freeradius:3.0 security update

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.

Security Fix(es):

  • freeradius: Information leakage in EAP-PWD (CVE-2022-41859)
  • freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)
  • freeradius: Crash on invalid abinary data (CVE-2022-41861)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:2870
Updated
2026-11-02
OSVDEBIAN-CVE-2022-41859 No score

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Record
DEBIAN-CVE-2022-41859
Updated
2026-11-03
OSVMGASA-2022-0482 No score

Updated freeradius packages fix security vulnerability

Information leakage in EAP-PWD. (CVE-2022-41859) Crash on unknown option in EAP-SIM. (CVE-2022-41860) Crash on invalid abinary data. (CVE-2022-41861)

Record
MGASA-2022-0482
Updated
2026-11-02
OSVopenSUSE-SU-2024:13386-1 No score

freeradius-server-3.2.3-2.1 on GA media

These are all security issues fixed in the freeradius-server-3.2.3-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13386-1
Updated
2026-11-02
OSVSUSE-SU-2022:4620-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

  • CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
  • CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
  • CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).
  • move logrotate options into specific parts for each log as 'global' options will persist past and clobber global options in the main logrotate config (bsc#1180525)
  • Fixed plaintext password entries in logfiles (bsc#1184016).
Record
SUSE-SU-2022:4620-1
Updated
2026-11-02
OSVSUSE-SU-2022:4621-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

  • CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
  • CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
  • CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).
Record
SUSE-SU-2022:4621-1
Updated
2026-11-02
OSVSUSE-SU-2022:4622-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

  • CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).
  • CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).
  • CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).
Record
SUSE-SU-2022:4622-1
Updated
2026-11-02
OSVSUSE-SU-2022:4626-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

  • CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204).

  • CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205).

  • CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206).

  • rebuild against the new net-snmp (jsc#SLE-11203).

Record
SUSE-SU-2022:4626-1
Updated
2026-11-02
OSVSUSE-SU-2023:0124-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

  • CVE-2022-41859: Fixed an issue in EAP-PWD that could leak information about the password, which could facilitate dictionary attacks (bsc#1206204).
  • CVE-2022-41860: Fixed a crash in servers with EAP_SIM manually configured, which could be triggered via a malformed SIM option (bsc#1206205).
  • CVE-2022-41861: Fixed a server crash that could be triggered by sending malformed data from a system in the RADIUS circle of trust (bsc#1206206).
Record
SUSE-SU-2023:0124-1
Updated
2026-11-02
OSVSUSE-SU-2023:0135-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

  • CVE-2022-41859: Fixed an issue in EAP-PWD that could leak information about the password, which could facilitate dictionary attacks (bsc#1206204).
  • CVE-2022-41860: Fixed a crash in servers with EAP_SIM manually configured, which could be triggered via a malformed SIM option (bsc#1206205).
  • CVE-2022-41861: Fixed a server crash that could be triggered by sending malformed data from a system in the RADIUS circle of trust (bsc#1206206).
Record
SUSE-SU-2023:0135-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freeradius
Alpine:v3.15
 before 3.0.26-r0
3.0.26-r0
freeradius
Alpine:v3.16
 before 3.0.26-r0
3.0.26-r0
freeradius
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-devel
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-doc
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-krb5
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-ldap
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-mysql
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-perl
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-postgresql
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
Show 119 moreShow less
Affected packages
PackageAffectedFixed
freeradius-rest
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-sqlite
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-unixODBC
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius-utils
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
python3-freeradius
AlmaLinux:9
From an advisory covering 3 CVEs
 before 3.0.21-37.el9
3.0.21-37.el9
freeradius
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-doc
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-krb5
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-ldap
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-mysql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-perl
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-postgresql
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-rest
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-sqlite
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-unixODBC
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius-utils
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
python3-freeradius
AlmaLinux:8
From an advisory covering 3 CVEs
 before 3.0.20-14.module_el8.8.0+3469+c05aea40
3.0.20-14.module_el8.8.0+3469+c05aea40
freeradius
Debian:12
 before 3.2.0+dfsg-1
3.2.0+dfsg-1
freeradius
Debian:13
 before 3.2.0+dfsg-1
3.2.0+dfsg-1
freeradius
Debian:14
 before 3.2.0+dfsg-1
3.2.0+dfsg-1
freeradius
Debian:10
From an advisory covering 3 CVEs
 before 3.0.17+dfsg-1.1+deb10u2, plus listed versions
3.0.17+dfsg-1.13.0.17+dfsg-1.1+deb10u1
3.0.17+dfsg-1.1+deb10u2
freeradius
Debian:11
From an advisory covering 3 CVEs
 before 3.0.21+dfsg-2.2+deb11u2, plus listed versions
3.0.21+dfsg-2.23.0.21+dfsg-2.2+deb11u13.0.21+dfsg-2.2+deb11u1~bpo10+1
3.0.21+dfsg-2.2+deb11u2
freeradius
Mageia:8
From an advisory covering 3 CVEs
 before 3.0.22-1.1.mga8
3.0.22-1.1.mga8
freeradius
openEuler:20.03-LTS-SP1
 before 3.0.15-27.oe1
3.0.15-27.oe1
freeradius
openEuler:20.03-LTS-SP3
 before 3.0.15-27.oe1
3.0.15-27.oe1
freeradius
openEuler:20.03-LTS-SP4
 before 3.0.15-27.oe2003sp4
3.0.15-27.oe2003sp4
freeradius
openEuler:22.03-LTS
 before 3.0.25-2.oe2203
3.0.25-2.oe2203
freeradius
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-doc
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-krb5
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-krb5-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-ldap
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-ldap-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-utils-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
python3-freeradius
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
python3-freeradius-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-mysql
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-mysql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-perl
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-perl-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-postgresql
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-postgresql-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-rest
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-rest-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-sqlite
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-sqlite-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-unixODBC
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius-unixODBC-debuginfo
Red Hat:enterprise_linux:9::crb
From an advisory covering 3 CVEs
 before 0:3.0.21-37.el9
0:3.0.21-37.el9
freeradius
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-doc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-krb5
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-krb5-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-ldap
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-mysql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-mysql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-perl
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-perl-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-postgresql
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-postgresql-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-rest
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-rest-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-sqlite
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-sqlite-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-unixODBC
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-unixODBC-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-utils
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius-utils-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
python3-freeradius
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
python3-freeradius-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
0:3.0.20-14.module+el8.8.0+17558+3f8a93b9
freeradius
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:3.0.20-14.module+el8.8.0+1130+46a6e0a1
0:3.0.20-14.module+el8.8.0+1130+46a6e0a1
freeradius-server
SUSE:Linux Enterprise High Performance Computing 15-ESPOS
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise High Performance Computing 15-LTSS
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise Server 15-LTSS
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise Server 15 SP1-BCL
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 15
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Enterprise Storage 6
From an advisory covering 3 CVEs
 before 3.0.16-150000.3.13.1
3.0.16-150000.3.13.1
freeradius-server
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 3 CVEs
 before 3.0.19-3.12.1
3.0.19-3.12.1
freeradius-server
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 3.0.19-3.12.1
3.0.19-3.12.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 3.0.19-3.12.1
3.0.19-3.12.1
freeradius-server
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise Real Time 15 SP3
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Manager Proxy 4.1
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Manager Proxy 4.2
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Manager Retail Branch Server 4.1
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Manager Retail Branch Server 4.2
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Manager Server 4.1
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Manager Server 4.2
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Enterprise Storage 7
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Enterprise Storage 7.1
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
openSUSE:Leap 15.3
From an advisory covering 3 CVEs
 before 3.0.21-150200.3.12.1
3.0.21-150200.3.12.1
freeradius-server
SUSE:Linux Enterprise Module for Server Applications 15 SP4
From an advisory covering 3 CVEs
 before 3.0.25-150400.4.4.1
3.0.25-150400.4.4.1
freeradius-server
openSUSE:Leap 15.4
From an advisory covering 3 CVEs
 before 3.0.25-150400.4.4.1
3.0.25-150400.4.4.1
freeradius-server
SUSE:OpenStack Cloud 9
From an advisory covering 3 CVEs
 before 3.0.15-2.23.1
3.0.15-2.23.1
freeradius-server
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 3 CVEs
 before 3.0.15-2.23.1
3.0.15-2.23.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 3 CVEs
 before 3.0.15-2.23.1
3.0.15-2.23.1
freeradius-server
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 3 CVEs
 before 3.0.15-2.23.1
3.0.15-2.23.1
freeradius-server
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 3.0.3-17.18.1
3.0.3-17.18.1
freeradius
Ubuntu:18.04:LTS
 All versions, plus listed versions
3.0.15+dfsg-1ubuntu23.0.16+dfsg-1ubuntu23.0.16+dfsg-1ubuntu33.0.16+dfsg-1ubuntu3.13.0.16+dfsg-1ubuntu3.2
 None known
freeradius
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.0.19+dfsg-33.0.19+dfsg-3build13.0.20+dfsg-13.0.20+dfsg-33.0.20+dfsg-3build1
Show 4 moreShow less
3.0.20+dfsg-3ubuntu0.13.0.20+dfsg-3ubuntu0.23.0.20+dfsg-3ubuntu0.43.0.20+dfsg-3ubuntu0.5
 None known
freeradius-server
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 3.2.3-2.1
3.2.3-2.1

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-41859 is a high vulnerability (CVSS 7.5) in Freeradius, published December 27, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. Fixed in freeradius 3.0.26-r0.

References

Show 50 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open