CVE-2019-10143
freeradius: privilege escalation due to insecure logrotate configuration
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · May 1, 2019
Updated · February 21, 2026
Description
It was discovered freeradius does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally inaccessible by the radiusd user.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Add su radiusd:radiusd to all log sections in /etc/logrotate.d/radiusd.
By keeping SELinux in "Enforcing" mode, radiusd user will be limited in the directories he can write to.
CVSS / CWE
CVSS 3.0 · 6.4CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-276 · Incorrect Default Permissions