[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnfLw9OQ95zrifs3ykUNzlJctutXC3WHrIUZ-iLYCXNg":3,"g5a-risk:CVE-2019-11234":194},{"success":4,"data":5,"meta":192},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":38,"epssPercentile":14,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":66,"references":67,"referencesCount":114,"weaknesses":115,"weaknessesCount":124,"isActivelyExploited":125,"cisaInfo":14,"otxData":14,"relatedBlogPosts":126,"seoMetadata":127,"configurations":152,"relatedVendorCves":183,"notableEvents":184},"CVE-2019-11234","What is CVE-2019-11234?","FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a \"Dragonblood\" issue, a similar issue to CVE-2019-9497.","2019-04-22T11:29:03.33","2019-05-13T18:29:03.59",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":29,"CVSSMetricV40":14},null,[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":26,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.07624,[38,38,38,38,38,38,38],"Critical",[42,46,50,55,60,63],{"vendor":43,"product":43,"version":44,"criteria":45,"vulnerable":4},"freeradius","*","cpe:2.3:a:freeradius:freeradius:*:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":44,"criteria":49,"vulnerable":4},"fedoraproject","fedora","cpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"redhat","enterprise_linux","7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":58,"criteria":59,"vulnerable":4},"canonical","ubuntu_linux","18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":56,"product":57,"version":61,"criteria":62,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",{"vendor":56,"product":57,"version":64,"criteria":65,"vulnerable":4},"19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",6,[68,72,75,78,82,85,90,96,99,104,108],{"url":69,"source":70,"tags":71},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-05\u002Fmsg00014.html","Opensuse",[],{"url":73,"source":70,"tags":74},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-05\u002Fmsg00032.html",[],{"url":76,"source":70,"tags":77},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2020-04\u002Fmsg00033.html",[],{"url":79,"source":80,"tags":81},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1131","Red Hat",[],{"url":83,"source":80,"tags":84},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1142",[],{"url":86,"source":80,"tags":87},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1695783",[88,89],"Issue Tracking","Third Party Advisory",{"url":91,"source":92,"tags":93},"https:\u002F\u002Ffreeradius.org\u002Frelease_notes\u002F?br=3.0.x&re=3.0.19","Freeradius",[94,95],"Release Notes","Vendor Advisory",{"url":97,"source":92,"tags":98},"https:\u002F\u002Ffreeradius.org\u002Fsecurity\u002F",[95],{"url":100,"source":101,"tags":102},"https:\u002F\u002Fpapers.mathyvanhoef.com\u002Fdragonblood.pdf","Mathyvanhoef",[103,89],"Technical Description",{"url":105,"source":106,"tags":107},"https:\u002F\u002Fusn.ubuntu.com\u002F3954-1\u002F","Ubuntu",[89],{"url":109,"source":110,"tags":111},"https:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F871675\u002F","Cert",[112,113,89],"Not Applicable","US Government Resource",11,[116],{"id":117,"name":118,"description":119,"extendedDescription":120,"status":121,"abstraction":122,"structure":123},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":128,"metaDescription":129,"keywords":130,"canonicalUrl":131,"structuredData":132},"What is CVE-2019-11234? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2019-11234, a critical severity cyber security vulnerability from 2019. FreeRADIUS before 3.0.19 does not prevent use of reflec...","CVE-2019-11234, CVE-2019-11234 vulnerability, CVE-2019-11234 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, freeradius security, fedoraproject security, redhat security, canonical security, freeradius vulnerability, fedora vulnerability, enterprise_linux vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-11234",{"@context":133,"@type":134,"headline":128,"description":129,"datePublished":9,"dateModified":10,"author":135,"publisher":139,"about":143,"mainEntityOfPage":147,"articleSection":150,"keywords":151},"https:\u002F\u002Fschema.org","TechArticle",{"@type":136,"name":137,"url":138},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":136,"name":137,"url":138,"logo":140},{"@type":141,"url":142},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":144,"name":6,"description":145,"additionalType":146},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":148,"@id":149},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2019-11234","Cybersecurity","CVE-2019-11234, CVE-2019-11234 vulnerability, CVE-2019-11234 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[153,161,167,173],{"Operator":14,"Negate":14,"Nodes":154},[155],{"Operator":156,"Negate":14,"CPEMatch":157},"OR",[158],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":159,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":160,"VersionEndIncluding":14},"90C5B6A9-0E46-438C-9EBB-63529AAD1B1D","3.0.19",{"Operator":14,"Negate":14,"Nodes":162},[163],{"Operator":156,"Negate":14,"CPEMatch":164},[165],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":166,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"20294CE7-12C8-43CA-A702-5ED2A3044FFC",{"Operator":14,"Negate":14,"Nodes":168},[169],{"Operator":156,"Negate":14,"CPEMatch":170},[171],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":172,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",{"Operator":14,"Negate":14,"Nodes":174},[175],{"Operator":156,"Negate":14,"CPEMatch":176},[177,179,181],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":178,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":180,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"07C312A0-CD2C-4B9C-B064-6409B25C278F",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":182,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",[],[185],{"id":186,"eventType":187,"eventTime":188,"details":189,"label":190,"color":191},"c8fef2db-66cd-4357-9630-c665de6c188a","LOW_EPSS_DELTA","2026-06-16T04:06:07.54683+00:00","Daily EPSS score decreased by 0.182 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":10,"cacheTime":193,"version":32},1793201597077,{"score":195,"band":196,"action":197,"scoredAt":198},54,"Medium","Plan remediation","2026-07-01T10:23:22.019548+00:00"]