CVE-2019-11235

CRITICAL · CVSS 9.8 EPSS 3.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-04-22 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-11235

Severity

CRITICAL

CVSS

9.8

EPSS

3.57%

Original NVD Description

FreeRADIUS before 3.0.19 mishandles the "each participant verifies that the received scalar is within a range, and that the received group element is a valid point on the curve being used" protection mechanism, aka a "Dragonblood" issue, a similar issue to CVE-2019-9498 and CVE-2019-9499.