REDHAT-BUG-1737663: Medium severity freeradius vulnerability
A flaw was found in the implementation of EAP-pwd in FreeRADIUS. An attacker could initiate several EAP-pwd handshakes to leak information, which can then be used to recover the user's WiFi password by performing dictionary and brute-force attacks.
References:
https://wpa3.mathyvanhoef.com/#new
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1737663?
The severity of REDHAT-BUG-1737663 is considered significant due to the potential for leakage of sensitive user information.
How do I fix REDHAT-BUG-1737663?
To fix REDHAT-BUG-1737663, ensure that you update to the latest version of FreeRADIUS that includes security patches addressing this vulnerability.
What causes REDHAT-BUG-1737663?
REDHAT-BUG-1737663 is caused by a flaw in the implementation of EAP-pwd in the FreeRADIUS software, allowing attackers to initiate multiple handshakes.
Who is affected by REDHAT-BUG-1737663?
Users of FreeRADIUS who utilize EAP-pwd for authentication may be affected by REDHAT-BUG-1737663.
What are the potential consequences of REDHAT-BUG-1737663?
The potential consequences of REDHAT-BUG-1737663 include unauthorized recovery of WiFi passwords through information leakage and subsequent brute-force attacks.