CVE-2022-41861

freeradius-memcached: A flaw was found in freeradius

CVE-2022-41861 is fixed in 22 products on 1 platform, first by freeradius 3.0.16+dfsg-1ubuntu3.2, released December 13, 2022. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0114
66th percentile

A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.

Where it's fixed

ProductFixed inFixReleased
Linux
freeradius · Debian 12.15 (bookworm) 3.2.0+dfsg-1 DEBIAN-CVE-2022-41861 Jan 17, 2023
freeradius · Debian 13.5 (trixie) 3.2.0+dfsg-1 DEBIAN-CVE-2022-41861 Jan 17, 2023
freeradius · Debian 14 3.2.0+dfsg-1 DEBIAN-CVE-2022-41861 Jan 17, 2023
freeradius · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius · rocky 8 0:3.0.20-14.module+el8.8.0+1130+46a6e0a1 RLSA-2023:2870 Jun 26, 2026
freeradius-common · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-common 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-common · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-common 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-common · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-common 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-config · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-config 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-config · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-config 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-config · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-config 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-devel · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-devel · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-devel · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-devel · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-devel · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-devel · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-dhcp · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-dhcp 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-dhcp · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-dhcp 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-dhcp · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-dhcp 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-doc · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-doc · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-doc · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-doc · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-doc · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-doc · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-iodbc · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-iodbc 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-iodbc · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-iodbc 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-iodbc · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-iodbc 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-krb5 · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-krb5 · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-krb5 · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-krb5 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-krb5 · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-krb5 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-krb5 · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-krb5 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-krb5 · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-krb5 · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-krb5 · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-krb5 · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-ldap · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-ldap · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-ldap · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-ldap 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-ldap · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-ldap 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-ldap · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-ldap 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-ldap · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-ldap · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-ldap · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-ldap · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-memcached · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-memcached 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-memcached · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-memcached 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-memcached · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-memcached 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-mysql · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-mysql · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-mysql · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-mysql 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-mysql · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-mysql 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-mysql · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-mysql 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-mysql · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-mysql · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-mysql · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-mysql · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-perl · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-perl · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-perl · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-perl · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-perl · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-perl · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-postgresql · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-postgresql · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-postgresql · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-postgresql 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-postgresql · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-postgresql 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-postgresql · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-postgresql 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-postgresql · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-postgresql · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-postgresql · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-postgresql · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-python3 · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-python3 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-python3 · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-python3 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-redis · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-redis 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-redis · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-redis 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-redis · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-redis 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-rest · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-rest · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-rest · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-rest 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-rest · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-rest 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-rest · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-rest 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-rest · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-rest · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-rest · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-rest · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-sqlite · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-sqlite · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-sqlite · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-sqlite · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-sqlite · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-sqlite · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-unixODBC · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-unixODBC · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-unixODBC · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-unixODBC · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-unixODBC · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-unixODBC · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-utils · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
freeradius-utils · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
freeradius-utils · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-utils 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-utils · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-utils 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-utils · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-utils 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
freeradius-utils · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
freeradius-utils · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
freeradius-utils · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
freeradius-utils · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023
freeradius-yubikey · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 freeradius-yubikey 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
freeradius-yubikey · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 freeradius-yubikey 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
freeradius-yubikey · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 freeradius-yubikey 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
libfreeradius3 · Ubuntu 18.04.6 LTS (bionic) 3.0.16+dfsg-1ubuntu3.2 libfreeradius3 3.0.16+dfsg-1ubuntu3.2 Dec 13, 2022
libfreeradius3 · Ubuntu 20.04 LTS (focal) 3.0.20+dfsg-3ubuntu0.2 libfreeradius3 3.0.20+dfsg-3ubuntu0.2 Dec 13, 2022
libfreeradius3 · Ubuntu 22.04.1 LTS (jammy) 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 libfreeradius3 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1 Dec 13, 2022
python3-freeradius · RHEL 8 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 RHSA-2023:2870 May 16, 2023
python3-freeradius · RHEL 9 0:3.0.21-37.el9 RHSA-2023:2166 May 9, 2023
python3-freeradius · almalinux 8 3.0.20-14.module_el8.8.0+3469+c05aea40 ALSA-2023:2870 May 16, 2023
python3-freeradius · almalinux 9 3.0.21-37.el9 ALSA-2023:2166 May 9, 2023
python3-freeradius · ol 8 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 ELSA-2023-2870 May 24, 2023
python3-freeradius · ol 9 0:3.0.21-37.el9 ELSA-2023-2166 May 15, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.