CVE-2022-41860 is a NULL pointer dereference vulnerability affecting FreeRADIUS. Specifically, an EAP-SIM supplicant sending an unknown SIM option can cause the server to crash due to improper handling of a failed dictionary lookup. This vulnerability carries a CVSS score of 7.5 (High), indicating it can be exploited remotely with low attack complexity, leading to a denial-of-service condition. There is no impact on confidentiality or integrity. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 0.9.3, <= 3.0.25CPE matchmatch criteria | cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
In freeradius when an EAP-SIM supplicant sends an unknown SIM option the server will try to look that option up in the internal dictionaries. This lookup will fail but the SIM code will not check for that failure. Instead it will dereference a NULL pointer and cause the server to crash.
Jan 10, 2023freeradius: Crash on unknown option in EAP-SIM
Apr 22, 2022