# CVE-2022-41859: freeradius: FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) ser...

CVE-2022-41859 is fixed in 13 products on 1 platform, first by DEBIAN-CVE-2022-41859, released January 17, 2023. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2022-41859
- Priority: High
- CVSS: 7.5 (Moderate)
- EPSS: 0.0089
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jan 17, 2023

## Description

FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.  Security Fix(es):  * freeradius: Information leakage in EAP-PWD (CVE-2022-41859)  * freeradius: Crash on unknown option in EAP-SIM (CVE-2022-41860)  * freeradius: Crash on invalid abinary data (CVE-2022-41861)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  Additional Changes:  For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.8 Release Notes linked from the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | freeradius Debian 11.6 (bullseye) | 3.0.21+dfsg-2.2+deb11u2 | [DLA-4232-1](https://patchblox.com/security/data/fix/linux/dla-4232-1.md) | Jun 26, 2025 |
| Linux | freeradius Debian 12.15 (bookworm) | 3.2.0+dfsg-1 | [DEBIAN-CVE-2022-41859](https://patchblox.com/security/data/fix/linux/debian-cve-2022-41859.md) | Jan 17, 2023 |
| Linux | freeradius Debian 13.5 (trixie) | 3.2.0+dfsg-1 | [DEBIAN-CVE-2022-41859](https://patchblox.com/security/data/fix/linux/debian-cve-2022-41859.md) | Jan 17, 2023 |
| Linux | freeradius Debian 14 | 3.2.0+dfsg-1 | [DEBIAN-CVE-2022-41859](https://patchblox.com/security/data/fix/linux/debian-cve-2022-41859.md) | Jan 17, 2023 |
| Linux | freeradius RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius rocky 8 | 0:3.0.20-14.module+el8.8.0+1130+46a6e0a1 | [RLSA-2023:2870](https://patchblox.com/security/data/fix/linux/rlsa-2023-2870.md) | Jun 26, 2026 |
| Linux | freeradius-devel RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-devel RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-devel almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-devel almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-devel ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-devel ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-doc RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-doc RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-doc almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-doc almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-doc ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-doc ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-krb5 RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-krb5 RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-krb5 almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-krb5 almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-krb5 ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-krb5 ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-ldap RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-ldap RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-ldap almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-ldap almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-ldap ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-ldap ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-mysql RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-mysql RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-mysql almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-mysql almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-mysql ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-mysql ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-perl RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-perl RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-perl almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-perl almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-perl ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-perl ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-postgresql RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-postgresql RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-postgresql almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-postgresql almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-postgresql ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-postgresql ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-rest RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-rest RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-rest almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-rest almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-rest ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-rest ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-sqlite RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-sqlite RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-sqlite almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-sqlite almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-sqlite ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-sqlite ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-unixODBC RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-unixODBC RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-unixODBC almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-unixODBC almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-unixODBC ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-unixODBC ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | freeradius-utils RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-utils RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-utils almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | freeradius-utils almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | freeradius-utils ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | freeradius-utils ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |
| Linux | python3-freeradius RHEL 8 | 0:3.0.20-14.module+el8.8.0+17558+3f8a93b9 | [RHSA-2023:2870](https://patchblox.com/security/data/fix/linux/rhsa-2023-2870.md) | May 16, 2023 |
| Linux | python3-freeradius RHEL 9 | 0:3.0.21-37.el9 | [RHSA-2023:2166](https://patchblox.com/security/data/fix/linux/rhsa-2023-2166.md) | May 9, 2023 |
| Linux | python3-freeradius almalinux 8 | 3.0.20-14.module_el8.8.0+3469+c05aea40 | [ALSA-2023:2870](https://patchblox.com/security/data/fix/linux/alsa-2023-2870.md) | May 16, 2023 |
| Linux | python3-freeradius almalinux 9 | 3.0.21-37.el9 | [ALSA-2023:2166](https://patchblox.com/security/data/fix/linux/alsa-2023-2166.md) | May 9, 2023 |
| Linux | python3-freeradius ol 8 | 0:3.0.20-14.module+el8.8.0+20995+3f8a93b9 | [ELSA-2023-2870](https://patchblox.com/security/data/fix/linux/elsa-2023-2870.md) | May 24, 2023 |
| Linux | python3-freeradius ol 9 | 0:3.0.21-37.el9 | [ELSA-2023-2166](https://patchblox.com/security/data/fix/linux/elsa-2023-2166.md) | May 15, 2023 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.