CVE-2019-10143
Fixed in a distro release EPSS <1%CVSS 6.4
It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."
Products: freeradius, fedoraproject fedora, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | freeradius | 3.0.19-r3 |
| Alpine 3.11 | freeradius | 3.0.19-r3 |
| Alpine 3.12 | freeradius | 3.0.19-r3 |
| Alpine 3.13 | freeradius | 3.0.19-r3 |
| Alpine 3.14 | freeradius | 3.0.19-r3 |
| Alpine 3.15 | freeradius | 3.0.19-r3 |
| Alpine 3.16 | freeradius | 3.0.19-r3 |
| Alpine 3.17 | freeradius | 3.0.19-r3 |
| Alpine 3.18 | freeradius | 3.0.19-r3 |
| Alpine 3.19 | freeradius | 3.0.19-r3 |
| Alpine 3.20 | freeradius | 3.0.19-r3 |
| Alpine 3.21 | freeradius | 3.0.19-r3 |
| Alpine 3.22 | freeradius | 3.0.19-r3 |
| Alpine 3.23 | freeradius | 3.0.19-r3 |
| Alpine 3.24 | freeradius | 3.0.19-r3 |
| Alpine 3.7 | freeradius | 3.0.17-r5 |
| Alpine 3.8 | freeradius | 3.0.17-r4 |
| Alpine 3.9 | freeradius | 3.0.17-r6 |
| Debian 12 | freeradius | no fix |
| Debian 13 | freeradius | 3.2.6+dfsg-3 |
| Debian 14 | freeradius | 3.2.6+dfsg-3 |
| Red Hat Enterprise Linux 7 | freeradius | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-debuginfo | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-devel | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-doc | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-krb5 | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-ldap | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-mysql | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-perl | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-postgresql | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-python | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-sqlite | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-unixODBC | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 7 | freeradius-utils | 0:3.0.13-15.el7 |
| Red Hat Enterprise Linux 8 | freeradius | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-debugsource | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-devel | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-doc | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-krb5 | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-krb5-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-ldap | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-ldap-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-mysql | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-mysql-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-perl | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-perl-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-postgresql | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-postgresql-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-rest | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-rest-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-sqlite | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-sqlite-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-unixODBC | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-unixODBC-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-utils | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Red Hat Enterprise Linux 8 | freeradius-utils-debuginfo | 0:3.0.17-6.module+el8.1.0+3392+9bd8939b |
| Ubuntu 18.04 LTS | freeradius | no fix |
| Ubuntu 20.04 LTS | freeradius | no fix |
| Ubuntu 22.04 LTS | freeradius | no fix |
| Ubuntu 24.04 LTS | freeradius | no fix |
| Ubuntu 25.10 | freeradius | no fix |
| Ubuntu 26.04 LTS | freeradius | no fix |
| Ubuntu 26.10 | freeradius | no fix |
| Ubuntu Pro 16.04 LTS | freeradius | no fix |