CVE-2019-11234

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
https://access.redhat.com/errata/RHSA-2019:1131
https://access.redhat.com/errata/RHSA-2019:1142
https://bugzilla.redhat.com/show_bug.cgi?id=1695783Issue Tracking, Third Party Advisory
https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19Release Notes, Vendor Advisory
https://freeradius.org/security/Vendor Advisory
https://papers.mathyvanhoef.com/dragonblood.pdfTechnical Description, Third Party Advisory
https://usn.ubuntu.com/3954-1/Third Party Advisory
https://www.kb.cert.org/vuls/id/871675/Not Applicable, Third Party Advisory, US Government Resource
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00014.html
http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00032.html
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00033.html
https://access.redhat.com/errata/RHSA-2019:1131
https://access.redhat.com/errata/RHSA-2019:1142
https://bugzilla.redhat.com/show_bug.cgi?id=1695783Issue Tracking, Third Party Advisory
https://freeradius.org/release_notes/?br=3.0.x&re=3.0.19Release Notes, Vendor Advisory
https://freeradius.org/security/Vendor Advisory
https://papers.mathyvanhoef.com/dragonblood.pdfTechnical Description, Third Party Advisory
https://usn.ubuntu.com/3954-1/Third Party Advisory
https://www.kb.cert.org/vuls/id/871675/Not Applicable, Third Party Advisory, US Government Resource

Timeline

Published: Apr 22, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-112359.8FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group e CVE-2019-112366.1In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.CVE-2019-11248.8A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution V CVE-2019-112428.1A man-in-the-middle vulnerability related to vCenter access was found in Cohesity DataPlatform version 5.x and 6.x prior to 6.1.1c. Cohesity CVE-2019-112438.1In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials r CVE-2019-112445.0In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubectl in the location specified by --cache-dir (defaulting to $HOME/.kube/http-cach CVE-2019-112457.8In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container re CVE-2019-112466.5The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar ins CVE-2019-112478.1The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were na CVE-2019-112488.2The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kube CVE-2019-112496.5The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar ins CVE-2019-11255.6An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who succ