CVE-2019-17185

moderate-risk
Published 2020-03-21

In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.

Do I need to act?

-
0.66% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Freeradius Opensuse

References (6)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html
Vendor Advisory https://freeradius.org/security/
Release Notes https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html
Vendor Advisory https://freeradius.org/security/
Release Notes https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_20
35
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 2/34 · Minimal
Exposure 7/34 · Low