High severity7.5NVD Advisory· Published Jan 17, 2023· Updated Jun 17, 2026

CVE-2022-41860

Description

In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

FreeRADIUS/Freeradius3 versions
cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*range: >=0.9.3,<=3.0.25
- (no CPE)
- (no CPE)
osv-coords51 versions
pkg:rpm/almalinux/freeradius pkg:rpm/almalinux/freeradius-devel pkg:rpm/almalinux/freeradius-doc pkg:rpm/almalinux/freeradius-krb5 pkg:rpm/almalinux/freeradius-ldap pkg:rpm/almalinux/freeradius-mysql pkg:rpm/almalinux/freeradius-perl pkg:rpm/almalinux/freeradius-postgresql pkg:rpm/almalinux/freeradius-rest pkg:rpm/almalinux/freeradius-sqlite pkg:rpm/almalinux/freeradius-unixODBC pkg:rpm/almalinux/freeradius-utils pkg:rpm/almalinux/python3-freeradius pkg:rpm/opensuse/freeradius-server&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/freeradius-server&distro=openSUSE%20Leap%2015.4 pkg:rpm/opensuse/freeradius-server&distro=openSUSE%20Tumbleweed pkg:rpm/suse/freeradius-server&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/freeradius-server&distro=SUSE%20Enterprise%20Storage%207 pkg:rpm/suse/freeradius-server&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-ESPOS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP4 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP3 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSS pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/freeradius-server&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/freeradius-server&distro=SUSE%20Manager%20Proxy%204.1 pkg:rpm/suse/freeradius-server&distro=SUSE%20Manager%20Proxy%204.2 pkg:rpm/suse/freeradius-server&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1 pkg:rpm/suse/freeradius-server&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.2 pkg:rpm/suse/freeradius-server&distro=SUSE%20Manager%20Server%204.1 pkg:rpm/suse/freeradius-server&distro=SUSE%20Manager%20Server%204.2 pkg:rpm/suse/freeradius-server&distro=SUSE%20OpenStack%20Cloud%209 pkg:rpm/suse/freeradius-server&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209
< 3.0.21-37.el9+ 50 more
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-37.el9
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.25-150400.4.4.1
- (no CPE)range: < 3.2.3-2.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.25-150400.4.4.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.3-17.18.1
- (no CPE)range: < 3.0.15-2.23.1
- (no CPE)range: < 3.0.19-3.12.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.15-2.23.1
- (no CPE)range: < 3.0.19-3.12.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.16-150000.3.13.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.19-3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.21-150200.3.12.1
- (no CPE)range: < 3.0.15-2.23.1
- (no CPE)range: < 3.0.15-2.23.1

Patches

Vulnerability mechanics

References

freeradius.org/security/nvdPatchVendor Advisory
github.com/FreeRADIUS/freeradius-server/commit/f1cdbb33ec61c4a64anvdPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2025/06/msg00030.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000