Описание
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | freeradius | Out of support scope | ||
| Red Hat Enterprise Linux 7 | freeradius | Out of support scope | ||
| Red Hat Enterprise Linux 8 | freeradius | Fixed | RHSA-2023:2870 | 16.05.2023 |
| Red Hat Enterprise Linux 9 | freeradius | Fixed | RHSA-2023:2166 | 09.05.2023 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
In freeradius, the EAP-PWD function compute_password_element() leaks i ...
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
EPSS
7.5 High
CVSS3