CVE-2019-10143

Name of the Vulnerable Software and Affected Versions: freeradius versions up to and including 3.0.19

Description: The issue is related to the incorrect configuration of logrotate in freeradius, potentially allowing a local attacker who already has control of the radiusd user to escalate their privileges to root. This could be achieved by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user. However, the upstream software maintainer has disputed this claim, stating that there is no way for anyone to gain privileges through this alleged issue.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.