CVE-2019-11234: Canonical Ubuntu Linux

Critical severity, CVSS 9.8. EPSS: 7.6% chance of exploitation in the next 30 days.

FreeRADIUS before 3.0.19 does not prevent use of reflection for authentication spoofing, aka a "Dragonblood" issue, a similar issue to CVE-2019-9497.

Affected products

• Canonical Ubuntu Linux: version 18.04 only; version 18.10 only; version 19.04 only
• Fedoraproject Fedora: any version
• Freeradius Freeradius: before 3.0.19 (fixed in 3.0.19)
• Red Hat Enterprise Linux: version 7.0 only

Published 2019-04-22. Last modified 2026-06-17.