PT-2021-4266 · Unknown · Radsecproxy

Haya Shulman + 1 · Published 2021-05-28 · Updated 2022-08-19 · CVE-2021-32642

Positive Technologies (AI Summary)

CVSS v3.1

9.4

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

Name of the Vulnerable Software and Affected Versions radsecproxy (affected versions not specified)

Description The issue is related to missing input validation in radsecproxy's naptr-eduroam.sh and radsec-dynsrv.sh scripts, which can lead to configuration injection via crafted radsec peer discovery DNS records. This can result in information disclosure, denial of service, and redirection of the Radius connection to a non-authenticated server, leading to non-authenticated network access.

Recommendations To resolve the issue, update the example scripts to the versions available in the master branch or 1.9 release. Note that these scripts are not part of the installation package and must be updated manually. The updated scripts can be used with any version of radsecproxy. As a temporary workaround, consider restricting the use of the vulnerable scripts until the updated versions are applied.

Fix

Special Elements Injection

RCE

Weakness Enumeration

CWE-74

CWE-20

Related Identifiers

BDU:2021-04874

CVE-2021-32642

GHSA-56GW-9RJ9-55RC

Affected Products

Radsecproxy

References · 16

• https://security-tracker.debian.org/tracker/CVE-2021-32642 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-32642 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-32642 · Security Note
• https://ubuntu.com/security/CVE-2021-32642 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04874 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-32642 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-32642 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HOC5AFG65NYLMMUTNSBOPC5F4LBAC7BR · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-32642 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W7QK5M2SZVMCAFSRQMM6PRZZRQQ372XI · Vendor Advisory
• https://github.com/radsecproxy/radsecproxy/security/advisories/GHSA-56gw-9rj9-55rc · Note
• https://github.com/radsecproxy/radsecproxy/commit/ab7a2ea42a75d5ad3421e4365f63cbdcb08fb7af · Note
• https://t.me/cvenotify/15954 · Telegram Post
• https://t.me/cvenotify/34922 · Telegram Post
• https://t.me/cvenotify/16088 · Telegram Post