Home

CVE-2019-10143

Description

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated there is simply no way for anyone to gain privileges through this alleged issue.

Risk Information

Base Score
7.0
MODERATE
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.077

Associated Vulnerability

VulnerabilityOS Platform
(RHSA-2020:3984) freeradius security and bug fix update freeradius-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-devel-3.0.13-15.el7.i686.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-devel-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-doc-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-krb5-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-ldap-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-mysql-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-perl-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-postgresql-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-python-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-sqlite-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-unixODBC-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984) freeradius security and bug fix update freeradius-utils-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-devel-3.0.13-15.el7.i686.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-devel-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-doc-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-krb5-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-ldap-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-mysql-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-perl-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-postgresql-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-python-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-sqlite-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-unixODBC-3.0.13-15.el7.x86_64.rpmLinux
(CESA-2020:3984) freeradius security and bug fix update freeradius-utils-3.0.13-15.el7.x86_64.rpmLinux
(RHSA-2020:3984)Moderate: security and bug fix update freeradius-debuginfo-3.0.13-15.el7.i686.rpmLinux
(RHSA-2020:3984)Moderate: security and bug fix update freeradius-debuginfo-3.0.13-15.el7.x86_64.rpmLinux
Freeradius update (ELSA-2020-3984) freeradius-3.0.13-15.el7.x86_64.rpmLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234