Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-11235

Fixed in a distro release EPSS 4%

FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499.

Published 2019-04-21 · CVE record · OSV

Products: freeradius, fedoraproject fedora, redhat enterprise_linux, redhat enterprise_linux_eus, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation, canonical ubuntu_linux, opensuse leap

Distro releases

ReleasePackageFixed in
Alpine 3.10freeradius3.0.19-r0
Alpine 3.11freeradius3.0.19-r0
Alpine 3.12freeradius3.0.19-r0
Alpine 3.13freeradius3.0.19-r0
Alpine 3.14freeradius3.0.19-r0
Alpine 3.15freeradius3.0.19-r0
Alpine 3.16freeradius3.0.19-r0
Alpine 3.17freeradius3.0.19-r0
Alpine 3.18freeradius3.0.19-r0
Alpine 3.19freeradius3.0.19-r0
Alpine 3.20freeradius3.0.19-r0
Alpine 3.21freeradius3.0.19-r0
Alpine 3.22freeradius3.0.19-r0
Alpine 3.23freeradius3.0.19-r0
Alpine 3.24freeradius3.0.19-r0
Alpine 3.6freeradius3.0.13-r3
Alpine 3.7freeradius3.0.15-r4
Alpine 3.8freeradius3.0.17-r3
Alpine 3.9freeradius3.0.17-r5
Amazon Linux 2freeradius3.0.13-10.amzn2
Amazon Linux 2freeradius-devel3.0.13-10.amzn2
Amazon Linux 2freeradius-doc3.0.13-10.amzn2
Amazon Linux 2freeradius-krb53.0.13-10.amzn2
Amazon Linux 2freeradius-ldap3.0.13-10.amzn2
Amazon Linux 2freeradius-mysql3.0.13-10.amzn2
Amazon Linux 2freeradius-perl3.0.13-10.amzn2
Amazon Linux 2freeradius-postgresql3.0.13-10.amzn2
Amazon Linux 2freeradius-python3.0.13-10.amzn2
Amazon Linux 2freeradius-sqlite3.0.13-10.amzn2
Amazon Linux 2freeradius-unixODBC3.0.13-10.amzn2
Amazon Linux 2freeradius-utils3.0.13-10.amzn2
Debian 12freeradius3.0.17+dfsg-1.1
Debian 13freeradius3.0.17+dfsg-1.1
Debian 14freeradius3.0.17+dfsg-1.1
Red Hat Enterprise Linux 7freeradius0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-debuginfo0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-devel0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-doc0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-krb50:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-ldap0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-mysql0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-perl0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-postgresql0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-python0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-sqlite0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-unixODBC0:3.0.13-10.el7_6
Red Hat Enterprise Linux 7freeradius-utils0:3.0.13-10.el7_6
Red Hat Enterprise Linux 8freeradius0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-debugsource0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-devel0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-doc0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-krb50:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-krb5-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-ldap0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-ldap-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-mysql0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-mysql-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-perl0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-perl-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-postgresql0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-postgresql-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-rest0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-rest-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-sqlite0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-sqlite-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-unixODBC0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-unixODBC-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-utils0:3.0.17-4.module+el8.0.0+3108+851cb559
Red Hat Enterprise Linux 8freeradius-utils-debuginfo0:3.0.17-4.module+el8.0.0+3108+851cb559
SUSE Enterprise Storage 4freeradius-server3.0.3-17.12.1
SUSE Linux Enterprise Module for Server Applications 15freeradius-server3.0.16-3.3.1
SUSE Linux Enterprise Server 12 SP1-LTSSfreeradius-server3.0.3-17.12.1
SUSE Linux Enterprise Server 12 SP2-BCLfreeradius-server3.0.3-17.12.1
SUSE Linux Enterprise Server 12 SP2-LTSSfreeradius-server3.0.3-17.12.1
SUSE Linux Enterprise Server 12 SP3freeradius-server3.0.15-2.11.2
SUSE Linux Enterprise Server 12 SP4freeradius-server3.0.15-2.11.2
SUSE Linux Enterprise Server 12-LTSSfreeradius-server3.0.3-17.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1freeradius-server3.0.3-17.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2freeradius-server3.0.3-17.12.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3freeradius-server3.0.15-2.11.2
SUSE Linux Enterprise Server for SAP Applications 12 SP4freeradius-server3.0.15-2.11.2
SUSE Linux Enterprise Software Development Kit 12 SP3freeradius-server3.0.15-2.11.2
SUSE Linux Enterprise Software Development Kit 12 SP4freeradius-server3.0.15-2.11.2
SUSE OpenStack Cloud 7freeradius-server3.0.3-17.12.1
Ubuntu 18.04 LTSfreeradius3.0.16+dfsg-1ubuntu3.1
openSUSE Leap 15.0freeradius-server3.0.16-lp150.2.3.1
openSUSE Leap 15.1freeradius-server3.0.16-lp151.4.3.1