Every CVE Search/ Get API key

CVE-2017-9148

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017...

9.8 CriticalFix available

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.91%Up 2.1 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 9.8

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Record
CVE-2017-9148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-287
Updated
2026-11-02
CVE List No score

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Record
CVE-2017-9148
Updated
2026-11-02
EUVDEUVD-2017-18086 No score

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Record
EUVD-2017-18086
Updated
2026-11-03
GitHub AdvisoriesGHSA-qvp7-wcjq-6rv5 9.8

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017...

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Record
GHSA-qvp7-wcjq-6rv5
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-287
Updated
2026-11-02
OSV 9.8

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Record
CVE-2017-9148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-9148 9.8

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Record
DEBIAN-CVE-2017-9148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVRHSA-2017:1581 7.4

Red Hat Security Advisory: freeradius security update

Record
RHSA-2017:1581
CVSS 3.0
7.4 HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVUBUNTU-CVE-2017-9148 9.8

The TLS session cache in FreeRADIUS 2.1.1 through 2.1.7, 3.0.x before 3.0.14, 3.1.x before 2017-02-04, and 4.0.x before 2017-02-04 fails to reliably prevent resumption of an unauthenticated session, which allows remote attackers (such as malicious 802.1X supplicants) to bypass authentication via PEAP or TTLS.

Record
UBUNTU-CVE-2017-9148
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2024:10767-1 No score

freeradius-server-3.0.23-1.5 on GA media

These are all security issues fixed in the freeradius-server-3.0.23-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10767-1
Updated
2026-11-02
OSVSUSE-SU-2017:1705-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

Security issue fixed:

  • CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. (bsc#1041445)

Non security issue fixed:

  • Fix case insensitive matching in compiled regular expressions (bsc#1027243)
Record
SUSE-SU-2017:1705-1
Updated
2026-11-02
OSVSUSE-SU-2017:1777-1 No score

Security update for freeradius-server

This update for freeradius-server fixes the following issues:

  • CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate authentication bypass. (bnc#1041445)
  • CVE-2015-4680: Add a configuration option to allow checking of all intermediate certificates for revocations. (bnc#935573)

The following non security issue was fixed:

  • Cannot create table radpostauth because of deprecated TIMESTAMP(14) syntax. (bsc#912873)
Record
SUSE-SU-2017:1777-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
freeradius
Debian:12
 before 3.0.12+dfsg-5
3.0.12+dfsg-5
freeradius
Debian:13
 before 3.0.12+dfsg-5
3.0.12+dfsg-5
freeradius
Debian:14
 before 3.0.12+dfsg-5
3.0.12+dfsg-5
freeradius
Debian:7
 before 2.1.12+dfsg-1.2+deb7u1, plus listed versions
2.1.12+dfsg-1.2
2.1.12+dfsg-1.2+deb7u1
freeradius
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-devel
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-doc
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-krb5
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-ldap
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
Show 28 moreShow less
Affected packages
PackageAffectedFixed
freeradius-mysql
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-perl
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-postgresql
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-python
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-sqlite
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-unixODBC
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-utils
Red Hat:enterprise_linux:7::server
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-devel
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-doc
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-krb5
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-ldap
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-mysql
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-perl
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-postgresql
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-python
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-sqlite
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-unixODBC
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-utils
Red Hat:enterprise_linux:7::workstation
 before 0:3.0.4-8.el7_3
0:3.0.4-8.el7_3
freeradius-server
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
 before 3.0.3-17.4.1
3.0.3-17.4.1
freeradius-server
SUSE:Linux Enterprise Software Development Kit 12 SP2
 before 3.0.3-17.4.1
3.0.3-17.4.1
freeradius-server
SUSE:Linux Enterprise Server 12 SP2
 before 3.0.3-17.4.1
3.0.3-17.4.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
 before 3.0.3-17.4.1
3.0.3-17.4.1
freeradius-server
SUSE:Linux Enterprise Software Development Kit 11 SP4
 before 2.1.1-7.24.1
2.1.1-7.24.1
freeradius-server
SUSE:Linux Enterprise Server 11 SP4
 before 2.1.1-7.24.1
2.1.1-7.24.1
freeradius-server
SUSE:Linux Enterprise Server for SAP Applications 11 SP4
 before 2.1.1-7.24.1
2.1.1-7.24.1
freeradius-server
openSUSE:Tumbleweed
 before 3.0.23-1.5
3.0.23-1.5

History

History
RecordedChangedSources
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-9148 is a critical vulnerability (CVSS 9.8) in Freeradius, published May 29, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.91%, the 90th percentile. Fixed in freeradius 3.0.12+dfsg-5.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open