Wind River Support Network

HomeDefectsLIN1022-2635

Fixed

LIN1022-2635 : Security Advisory - freeradius - CVE-2022-41861

Created: Dec 7, 2022 Updated: Apr 6, 2023

Resolved Date: Mar 21, 2023

Found In Version: 10.22.33.1

Fix Version: 10.22.33.7

Severity: Standard

Applicable for: Wind River Linux LTS 22

Component/s: Userspace

Description

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

https://nvd.nist.gov/vuln/detail/CVE-2022-41861

CVEs

CVE-2022-41861