The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4626-1 advisory.

  - In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which     allows an attacker to substantially reduce the size of an offline dictionary attack. (CVE-2022-41859)

  - In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that     option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that     failure. Instead, it will dereference a NULL pointer, and cause the server to crash. (CVE-2022-41860)

  - A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary     attribute which can cause the server to crash. (CVE-2022-41861)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0124-1 advisory.

  - In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which     allows an attacker to substantially reduce the size of an offline dictionary attack. (CVE-2022-41859)

  - In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that     option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that     failure. Instead, it will dereference a NULL pointer, and cause the server to crash. (CVE-2022-41860)

  - A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary     attribute which can cause the server to crash. (CVE-2022-41861)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートの Debian 10 ホストには、dla-3342 のアドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

  - freeradius で、EAP-PWD 関数の compute_password_element() がパスワードに関する情報を漏洩させるため、攻撃者がオフライン辞書攻撃のサイズを大幅に削減する可能性があります。(CVE-2022-41859)

  - freeradius で、EAP-SIM サプリカントが不明な SIM オプションを送信すると、サーバーはそのオプションを内部辞書で検索しようとします。この検索は失敗しますが、SIM コードはその失敗をチェックしません。代わりに、NULL ポインターを逆参照し、サーバーをクラッシュさせます。(CVE-2022-41860)

  - freeradius に欠陥が見つかりました。悪意のある RADIUS クライアントまたはホームサーバーが、無効な形式のバイナリ属性を送信し、サーバーをクラッシュさせる可能性があります。(CVE-2022-41861)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートの CentOS Linux 8 ホストにインストールされているパッケージは、CESA-2023: 2870 のアドバイザリに記載されている複数の脆弱性の影響を受けます。

  - freeradius で、EAP-PWD 関数の compute_password_element() がパスワードに関する情報を漏洩させるため、攻撃者がオフライン辞書攻撃のサイズを大幅に削減する可能性があります。(CVE-2022-41859)

  - freeradius で、EAP-SIM サプリカントが不明な SIM オプションを送信すると、サーバーはそのオプションを内部辞書で検索しようとします。この検索は失敗しますが、SIM コードはその失敗をチェックしません。代わりに、NULL ポインターを逆参照し、サーバーをクラッシュさせます。(CVE-2022-41860)

  - freeradius に欠陥が見つかりました。悪意のある RADIUS クライアントまたはホームサーバーが、無効な形式のバイナリ属性を送信し、サーバーをクラッシュさせる可能性があります。(CVE-2022-41861)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートのOracle Linux 8ホストに、ELSA-2023-2870アドバイザリに記載されている複数の脆弱性の影響を受けるパッケージがインストールされています。

  - freeradius に欠陥が見つかりました。悪意のある RADIUS クライアントまたはホームサーバーが、無効な形式のバイナリ属性を送信し、サーバーをクラッシュさせる可能性があります。(CVE-2022-41861)

  - freeradius で、EAP-PWD 関数の compute_password_element() がパスワードに関する情報を漏洩させるため、攻撃者がオフライン辞書攻撃のサイズを大幅に削減する可能性があります。(CVE-2022-41859)

  - freeradius で、EAP-SIM サプリカントが不明な SIM オプションを送信すると、サーバーはそのオプションを内部辞書で検索しようとします。この検索は失敗しますが、SIM コードはその失敗をチェックしません。代わりに、NULL ポインターを逆参照し、サーバーをクラッシュさせます。(CVE-2022-41860)

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-98832b2cc2 advisory.

    Update to upstream release 3.0.26.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4620-1 advisory.

  - In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which     allows an attacker to substantially reduce the size of an offline dictionary attack. (CVE-2022-41859)

  - In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that     option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that     failure. Instead, it will dereference a NULL pointer, and cause the server to crash. (CVE-2022-41860)

  - A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary     attribute which can cause the server to crash. (CVE-2022-41861)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2870 advisory.

    * freeradius: Information leakage in EAP-PWD (CVE-2022-41859)
    * freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)
    * freeradius: Crash on invalid abinary data (CVE-2022-41861)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2023:0087 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2022-41859:
    In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which     allows an attacker to substantially reduce the size of an offline dictionary attack.

    CVE-2022-41860:
    In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that     option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that     failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

    CVE-2022-41861:
    A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary     attribute which can cause the server to crash.

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4232 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4232-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                          Abhijith PA     June 26, 2025                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : freeradius     Version        : 3.0.21+dfsg-2.2+deb11u2     CVE ID         : CVE-2022-41859 CVE-2022-41860 CVE-2022-41861

    Several security vulnerabilities have been discovered in freeradius, a     highly configurable RADIUS server.


    CVE-2022-41859

         The EAP-PWD function compute_password_element() leaks information          about the password which allows an attacker to substantially          reduce the size of an offline dictionary attack.

    CVE-2022-41860

        When an EAP-SIM supplicant sends an unknown SIM option, the server         will try to look that option up in the internal dictionaries. This         lookup will fail, but the SIM code will not check for that         failure. Instead, it will dereference a NULL pointer, and cause         the server to crash.

    CVE-2022-41861

        A malicious RADIUS client or home server can send a malformed         abinary attribute which can cause the server to crash. This crash         is not exploitable by end users. Only systems which are in the         RADIUS circle of trust can send these malformed attributes to a         server.

    For Debian 11 bullseye, these problems have been fixed in version     3.0.21+dfsg-2.2+deb11u2.

    We recommend that you upgrade your freeradius packages.

    For the detailed security status of freeradius please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/freeradius

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
169354	SUSE SLES15 Security Update : freeradius-server (SUSE-SU-2022:4626-1)	Nessus	SuSE Local Security Checks	2022/12/28	2023/7/14	high
170478	SUSE SLES12 Security Update : freeradius-server (SUSE-SU-2023:0124-1)	Nessus	SuSE Local Security Checks	2023/1/24	2023/7/13	high
171904	Debian DLA-3342-1: freeradius - LTS セキュリティ更新	Nessus	Debian Local Security Checks	2023/2/24	2025/1/22	high
175889	CentOS 8 : freeradius: 3.0 (CESA-2023: 2870)	Nessus	CentOS Local Security Checks	2023/5/16	2024/2/8	high
176272	Oracle Linux 8：FreeRADIUS: 3.0 (ELSA-2023-2870)	Nessus	Oracle Linux Local Security Checks	2023/5/24	2024/10/22	high
169161	Fedora 36 : freeradius (2022-98832b2cc2)	Nessus	Fedora Local Security Checks	2022/12/22	2024/11/14	high
169349	SUSE SLES15 Security Update : freeradius-server (SUSE-SU-2022:4620-1)	Nessus	SuSE Local Security Checks	2022/12/28	2023/7/14	high
176174	AlmaLinux 8 : freeradius:3.0 (ALSA-2023:2870)	Nessus	Alma Linux Local Security Checks	2023/5/20	2025/1/13	high
236561	Alibaba Cloud Linux 3 : 0087: freeradius:3.0 (ALINUX3-SA-2023:0087)	Nessus	Alibaba Cloud Linux Local Security Checks	2025/5/14	2025/5/14	high
240656	Debian dla-4232 : freeradius - security update	Nessus	Debian Local Security Checks	2025/6/26	2025/6/26	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

high