Описание
Security update for freeradius-server
This update for freeradius-server fixes the following issues:
- CVE-2019-13456: Fixed a side-channel password leak in EAP-pwd (bsc#1144524).
- CVE-2019-17185: Fixed a debial of service due to multithreaded BN_CTX access (bsc#1166847).
- Fixed an issue in TLS-EAP where the OCSP verification, when an intermediate client certificate was not explicitly trusted (bsc#1146848).
This update was imported from the SUSE:SLE-15:Update update project.
Список пакетов
openSUSE Leap 15.1
Ссылки
- E-Mail link for openSUSE-SU-2020:0553-1
- SUSE Security Ratings
- SUSE Bug 1144524
- SUSE Bug 1146848
- SUSE Bug 1166847
- SUSE CVE CVE-2019-13456 page
- SUSE CVE CVE-2019-17185 page
Описание
In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
Затронутые продукты
Ссылки
- CVE-2019-13456
- SUSE Bug 1144524
- SUSE Bug 1166858
Описание
In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple threads use the same BN_CTX instance concurrently, resulting in crashes when concurrent EAP-pwd handshakes are initiated. This can be abused by an adversary as a Denial-of-Service (DoS) attack.
Затронутые продукты
Ссылки
- CVE-2019-17185
- SUSE Bug 1166847