CVE-2024-3596
CVE-2024-3596 · RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
This page contains facts from public vulnerability sources. Check the original advisory before updating.
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
CVSS 9.0 · Critical · EPSS 14.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
rfc
- Versions
- 2865: Affected
No fix published
freeradius Debian:12
- Versions
- 3.2.1+dfsg-4
- 3.2.1+dfsg-4+deb12u1
- 3.2.10+dfsg-1
- 3.2.10+dfsg-2
- 3.2.2+dfsg-1~exp1
- 3.2.3+dfsg-1
- 3.2.3+dfsg-2
- 3.2.5+dfsg-1
- 3.2.5+dfsg-2
- 3.2.5+dfsg-3
- 3.2.6+dfsg-1
- 3.2.6+dfsg-2
- 3.2.6+dfsg-2~bpo12+1
- 3.2.6+dfsg-3
- 3.2.7+dfsg-1
- 3.2.7+dfsg-1~bpo12+1
- 3.2.7+dfsg-2
- 3.2.8+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeradius Debian:13
- Affected ranges
- ECOSYSTEM: < 3.2.5+dfsg-1
Update to 3.2.5+dfsg-1
freeradius Debian:14
- Affected ranges
- ECOSYSTEM: < 3.2.5+dfsg-1
Update to 3.2.5+dfsg-1
krb5 Ubuntu:Pro:14.04:LTS
- Versions
- 1.10.1+dfsg-6.1ubuntu1
- 1.11.3+dfsg-3ubuntu2
- 1.12+dfsg-2ubuntu1
- 1.12+dfsg-2ubuntu2
- 1.12+dfsg-2ubuntu3
- 1.12+dfsg-2ubuntu4
- 1.12+dfsg-2ubuntu4.2
- 1.12+dfsg-2ubuntu5
- 1.12+dfsg-2ubuntu5.1
- 1.12+dfsg-2ubuntu5.2
- 1.12+dfsg-2ubuntu5.3
- 1.12+dfsg-2ubuntu5.4
- 1.12+dfsg-2ubuntu5.4+esm1
- 1.12+dfsg-2ubuntu5.4+esm2
- 1.12+dfsg-2ubuntu5.4+esm3
- 1.12+dfsg-2ubuntu5.4+esm4
- 1.12+dfsg-2ubuntu5.4+esm5
- Affected ranges
- ECOSYSTEM: < 1.12+dfsg-2ubuntu5.4+esm6
Update to 1.12+dfsg-2ubuntu5.4+esm6
libpam-radius-auth Ubuntu:Pro:14.04:LTS
- Versions
- 1.3.17-0ubuntu4
- 1.3.17-0ubuntu4+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
krb5 Ubuntu:Pro:16.04:LTS
- Versions
- 1.13.2+dfsg-2
- 1.13.2+dfsg-3
- 1.13.2+dfsg-4
- 1.13.2+dfsg-5
- 1.13.2+dfsg-5ubuntu1
- 1.13.2+dfsg-5ubuntu2
- 1.13.2+dfsg-5ubuntu2.1
- 1.13.2+dfsg-5ubuntu2.1+esm1
- 1.13.2+dfsg-5ubuntu2.2
- 1.13.2+dfsg-5ubuntu2.2+esm3
- 1.13.2+dfsg-5ubuntu2.2+esm4
- 1.13.2+dfsg-5ubuntu2.2+esm5
- Affected ranges
- ECOSYSTEM: < 1.13.2+dfsg-5ubuntu2.2+esm6
Update to 1.13.2+dfsg-5ubuntu2.2+esm6
freeradius Ubuntu:Pro:16.04:LTS
- Versions
- 2.1.12+dfsg-1.3ubuntu5
- 2.2.8+dfsg-0.1
- 2.2.8+dfsg-0.1build1
- 2.2.8+dfsg-0.1build2
- 2.2.8+dfsg-0.1ubuntu0.1
- 2.2.8+dfsg-0.1ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
libpam-radius-auth Ubuntu:16.04:LTS
- Versions
- 1.3.17-0ubuntu4
- 1.3.17-0ubuntu4.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeradius Ubuntu:18.04:LTS
- Versions
- 3.0.15+dfsg-1ubuntu2
- 3.0.16+dfsg-1ubuntu2
- 3.0.16+dfsg-1ubuntu3
- 3.0.16+dfsg-1ubuntu3.1
- 3.0.16+dfsg-1ubuntu3.2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
krb5 Ubuntu:Pro:18.04:LTS
- Versions
- 1.15.1-2
- 1.16-2
- 1.16-2build1
- 1.16-2ubuntu0.1
- 1.16-2ubuntu0.1+esm1
- 1.16-2ubuntu0.2
- 1.16-2ubuntu0.3
- 1.16-2ubuntu0.4
- 1.16-2ubuntu0.4+esm1
- 1.16-2ubuntu0.4+esm2
- Affected ranges
- ECOSYSTEM: < 1.16-2ubuntu0.4+esm3
Update to 1.16-2ubuntu0.4+esm3
libpam-radius-auth Ubuntu:18.04:LTS
- Versions
- 1.3.17-0ubuntu5
- 1.3.17-0ubuntu5.18.04.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeradius Ubuntu:20.04:LTS
- Versions
- 3.0.19+dfsg-3
- 3.0.19+dfsg-3build1
- 3.0.20+dfsg-1
- 3.0.20+dfsg-3
- 3.0.20+dfsg-3build1
- 3.0.20+dfsg-3ubuntu0.1
- 3.0.20+dfsg-3ubuntu0.2
- Affected ranges
- ECOSYSTEM: < 3.0.20+dfsg-3ubuntu0.4
Update to 3.0.20+dfsg-3ubuntu0.4
krb5 Ubuntu:20.04:LTS
- Versions
- 1.17-6
- 1.17-6ubuntu3
- 1.17-6ubuntu4
- 1.17-6ubuntu4.1
- 1.17-6ubuntu4.2
- 1.17-6ubuntu4.3
- 1.17-6ubuntu4.4
- 1.17-6ubuntu4.6
- 1.17-6ubuntu4.7
- Affected ranges
- ECOSYSTEM: < 1.17-6ubuntu4.8
Update to 1.17-6ubuntu4.8
libpam-radius-auth Ubuntu:20.04:LTS
- Versions
- 1.3.17-0ubuntu5
- 1.4.0-2
- 1.4.0-2ubuntu1
- 1.4.0-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeradius Ubuntu:22.04:LTS
- Versions
- 3.0.21+dfsg-2.2
- 3.0.21+dfsg-3
- 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu2
- 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3
- 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1
- 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.2
- Affected ranges
- ECOSYSTEM: < 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3
Update to 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3
krb5 Ubuntu:22.04:LTS
- Versions
- 1.18.3-6
- 1.18.3-7
- 1.19.2-0ubuntu1
- 1.19.2-1
- 1.19.2-2
- 1.19.2-2ubuntu0.1
- 1.19.2-2ubuntu0.2
- 1.19.2-2ubuntu0.3
- 1.19.2-2ubuntu0.4
- Affected ranges
- ECOSYSTEM: < 1.19.2-2ubuntu0.5
Update to 1.19.2-2ubuntu0.5
libpam-radius-auth Ubuntu:22.04:LTS
- Versions
- 2.0.0-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeradius Ubuntu:24.04:LTS
- Versions
- 3.2.3+dfsg-2
- 3.2.3+dfsg-2build2
- 3.2.3+dfsg-2build6
- 3.2.3+dfsg-2build7
- Affected ranges
- ECOSYSTEM: < 3.2.5+dfsg-3~ubuntu24.04.1
Update to 3.2.5+dfsg-3~ubuntu24.04.1
krb5 Ubuntu:24.04:LTS
- Versions
- 1.20.1-3ubuntu1
- 1.20.1-5build1
- 1.20.1-6ubuntu1
- 1.20.1-6ubuntu2
- 1.20.1-6ubuntu2.1
- 1.20.1-6ubuntu2.2
- Affected ranges
- ECOSYSTEM: < 1.20.1-6ubuntu2.3
Update to 1.20.1-6ubuntu2.3
libpam-radius-auth Ubuntu:24.04:LTS
- Versions
- 2.0.0-1
- 2.0.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://datatracker.ietf.org/doc/html/rfc2865
- https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/
- https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf
- https://www.blastradius.fail/
- http://www.openwall.com/lists/oss-security/2024/07/09/4
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014
- https://cert-portal.siemens.com/productcert/html/ssa-794185.html
- https://cert-portal.siemens.com/productcert/html/ssa-723487.html
- https://security.netapp.com/advisory/ntap-20240822-0001/
- https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol
- https://www.kb.cert.org/vuls/id/456537
- https://cert-portal.siemens.com/productcert/html/ssa-364175.html
- https://cert-portal.siemens.com/productcert/html/ssa-770770.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-3596