https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:27:48.501255+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-10143 CVE-2019-10143 2026-10-03T20:27:48.517485+00:00

Affected: freeradius, fedoraproject fedora, redhat enterprise_linux

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. NOTE: the upstream software maintainer has stated "there is simply no way for anyone to gain privileges through this alleged issue."