CVEvulnerability
CVE-2019-13456
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.9 LOW — AV:A/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-203
Description
In FreeRADIUS 3.0 through 3.0.19, on average 1 in every 2048 EAP-pwd handshakes fails because the password element cannot be found within 10 iterations of the hunting and pecking loop. This leaks information that an attacker can use to recover the password of any user. This information leakage is similar to the "Dragonblood" attack and CVE-2019-9494.
Affected configurations
• freeradius freeradius (>= 3.0.0 <= 3.0.19)
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
• opensuse leap 15.1
Related
Weakness · CWE (1)
- CWE-203 Observable Discrepancy weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1737663 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://freeradius.org/security/ Vendor Advisory
- https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa Patch, Third Party Advisory
- https://wpa3.mathyvanhoef.com Exploit, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00039.html Mailing List, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1737663 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://freeradius.org/security/ Vendor Advisory
- https://github.com/FreeRADIUS/freeradius-server/commit/3ea2a5a026e73d81cd9a3e9bbd4300c433004bfa Patch, Third Party Advisory
- https://wpa3.mathyvanhoef.com Exploit, Third Party Advisory