Ubuntu Security Notice 5785-1 - It was discovered that FreeRADIUS incorrectly handled multiple EAP-pwd handshakes. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. Shane Guan discovered that FreeRADIUS incorrectly handled memory when checking unknown SIM option sent by EAP-SIM supplicant. An attacker could possibly use this issue to cause a denial of service on the server. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
a7bd71afc6329ccb72ca453d36d94ee8283b47169870a31f511a50416559d346
Red Hat Security Advisory 2020-4799-01 - FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service server, designed to allow centralized authentication and authorization for a network. Issues addressed include a denial of service vulnerability.
2b7dfbe25aa1e7774a8e9aeff265697961d6572fd8487e818721c8ad738618f8
Red Hat Security Advisory 2020-3984-01 - FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service server, designed to allow centralized authentication and authorization for a network. Issues addressed include denial of service, information leakage, and privilege escalation vulnerabilities.
dd9c1f347716776d653107ebb66d77b11ca9589f569d669463b79f98497f67ed