Test ID:	1.3.6.1.4.1.25623.1.0.876668
Category:	Fedora Local Security Checks
Title:	Fedora Update for freeradius FEDORA-2019-9454ce61b2
Summary:	The remote host is missing an update for the 'freeradius'; package(s) announced via the FEDORA-2019-9454ce61b2 advisory.
Description:	Summary: The remote host is missing an update for the 'freeradius' package(s) announced via the FEDORA-2019-9454ce61b2 advisory. Vulnerability Insight: The FreeRADIUS Server Project is a high performance and highly configurable GPL', d free RADIUS server. The server is similar in some respects to Livingston', s 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don', t share a lot in common any more. It now has many more features than Cistron or Livingston, and is much more configurable. FreeRADIUS is an Internet authentication daemon, which implements the RADIUS protocol, as defined in RFC 2865 (and others). It allows Network Access Servers (NAS boxes) to perform authentication for dial-up users. There are also RADIUS clients available for Web servers, firewalls, Unix logins, and more. Using RADIUS allows authentication and authorization for a network to be centralized, and minimizes the amount of re-configuration which has to be done when adding or deleting new users. Affected Software/OS: 'freeradius' package(s) on Fedora 29. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-10143 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10143 https://github.com/FreeRADIUS/freeradius-server/pull/2666 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TKODLHHUOVAYENTBP4D3N25ST3Q6LJBP/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/A6VKBZAZKJP5QKXDXRKCM2ZPZND3TFAX/ http://seclists.org/fulldisclosure/2019/Nov/14 http://packetstormsecurity.com/files/155361/FreeRadius-3.0.19-Logrotate-Privilege-Escalation.html https://freeradius.org/security/ RedHat Security Advisories: RHSA-2019:3353 https://access.redhat.com/errata/RHSA-2019:3353
Copyright	Copyright (C) 2019 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.