RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
CVSS Details
- CVSS 3.1 Base Score: 9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-freeradiusalma-upgrade-freeradius-develalma-upgrade-freeradius-docalma-upgrade-freeradius-krb5alma-upgrade-freeradius-ldapalma-upgrade-freeradius-mysqlalma-upgrade-freeradius-perlalma-upgrade-freeradius-postgresqlalma-upgrade-freeradius-restalma-upgrade-freeradius-sqlitealma-upgrade-freeradius-unixodbcalma-upgrade-freeradius-utilsalma-upgrade-krb5-develalma-upgrade-krb5-libsalma-upgrade-krb5-pkinitalma-upgrade-krb5-serveralma-upgrade-krb5-server-ldapalma-upgrade-krb5-workstationalma-upgrade-libkadm5alma-upgrade-python3-freeradius | Aug 8, 2024 | Jul 9, 2024 | |
| Alpine Linux | alpine-linux-upgrade-freeradius | Aug 8, 2025 | Jul 9, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-freeradiusamazon-linux-ami-2-upgrade-freeradius-debuginfoamazon-linux-ami-2-upgrade-freeradius-develamazon-linux-ami-2-upgrade-freeradius-docamazon-linux-ami-2-upgrade-freeradius-krb5amazon-linux-ami-2-upgrade-freeradius-ldapamazon-linux-ami-2-upgrade-freeradius-mysqlamazon-linux-ami-2-upgrade-freeradius-perlamazon-linux-ami-2-upgrade-freeradius-postgresqlamazon-linux-ami-2-upgrade-freeradius-pythonamazon-linux-ami-2-upgrade-freeradius-sqliteamazon-linux-ami-2-upgrade-freeradius-unixodbcamazon-linux-ami-2-upgrade-freeradius-utils | Aug 14, 2024 | Jul 9, 2024 | |
| Aruba Aos 10 | aruba-aos-10-cve-2024-3596 | Jan 14, 2025 | Jul 12, 2024 | |
| Aruba Aos 8 | aruba-aos-8-cve-2024-3596 | Jan 14, 2025 | Jul 12, 2024 | |
| Aruba Aos Cx | aruba-aos-cx-cve-2024-3596 | Feb 5, 2025 | Jul 12, 2024 | |
| Aruba Ecos | aruba-ecos-cve-2024-3596 | Sep 25, 2025 | Jul 12, 2024 | |
| Cisco Asa | cisco-asa-update-latest | Jan 19, 2026 | Jul 10, 2024 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jul 9, 2024 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Sep 9, 2024 | |
| Fortinet Fortianalyzer | fortinet-fortianalyzer-upgrade-latest | May 26, 2026 | Aug 13, 2024 | |
| Fortinet Fortimanager | fortinet-fortimanager-upgrade-latest | May 25, 2026 | Aug 13, 2024 | |
| Fortinet Fortiweb | fortinet-fortiweb-upgrade-latest | Jun 30, 2026 | Aug 13, 2024 | |
| Fortios | fortios-upgrade-latest | Mar 12, 2025 | Aug 13, 2024 | |
| Msft | microsoft-windows-windows_10-1507-kb5040448microsoft-windows-windows_10-1607-kb5040434microsoft-windows-windows_10-1809-kb5040430microsoft-windows-windows_10-21h2-kb5040427microsoft-windows-windows_10-22h2-kb5040427microsoft-windows-windows_11-21h2-kb5040431microsoft-windows-windows_11-22h2-kb5040442microsoft-windows-windows_11-23h2-kb5040442microsoft-windows-windows_server_2012-kb5040485microsoft-windows-windows_server_2012_r2-kb5040456microsoft-windows-windows_server_2016-1607-kb5040434microsoft-windows-windows_server_2019-1809-kb5040430microsoft-windows-windows_server_2022-21h2-kb5040437microsoft-windows-windows_server_2022-22h2-kb5040437microsoft-windows-windows_server_2022-23h2-kb5040438msft-kb5040490-a33291f3-f1b2-46ec-995d-5a6bcd9b90c7msft-kb5040490-ecd666b8-158c-4500-abdb-abf60983b463msft-kb5040498-f961cc14-8b04-4069-ace4-5f938af42077 | Jul 9, 2024 | Jul 9, 2024 | |
| Nutanix Ahv | nutanix-ahv-upgrade-latest | Jun 5, 2026 | Apr 3, 2025 | |
| Oracle_linux | — | oracle-linux-upgrade-freeradiusoracle-linux-upgrade-freeradius-develoracle-linux-upgrade-freeradius-docoracle-linux-upgrade-freeradius-krb5oracle-linux-upgrade-freeradius-ldaporacle-linux-upgrade-freeradius-mysqloracle-linux-upgrade-freeradius-perloracle-linux-upgrade-freeradius-postgresqloracle-linux-upgrade-freeradius-pythonoracle-linux-upgrade-freeradius-restoracle-linux-upgrade-freeradius-sqliteoracle-linux-upgrade-freeradius-unixodbcoracle-linux-upgrade-freeradius-utilsoracle-linux-upgrade-krb5-develoracle-linux-upgrade-krb5-libsoracle-linux-upgrade-krb5-pkinitoracle-linux-upgrade-krb5-serveroracle-linux-upgrade-krb5-server-ldaporacle-linux-upgrade-krb5-workstationoracle-linux-upgrade-libkadm5oracle-linux-upgrade-python3-freeradius | Aug 16, 2024 | Jul 9, 2024 |
| Palo Alto Networks Pan Os | palo-alto-networks-pan-os-upgrade-latest | Jan 7, 2025 | Jul 10, 2024 | |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-freeradiusredhat-upgrade-freeradius-debuginforedhat-upgrade-freeradius-debugsourceredhat-upgrade-freeradius-develredhat-upgrade-freeradius-docredhat-upgrade-freeradius-krb5redhat-upgrade-freeradius-krb5-debuginforedhat-upgrade-freeradius-ldapredhat-upgrade-freeradius-ldap-debuginforedhat-upgrade-freeradius-mysqlredhat-upgrade-freeradius-mysql-debuginforedhat-upgrade-freeradius-perlredhat-upgrade-freeradius-perl-debuginforedhat-upgrade-freeradius-postgresqlredhat-upgrade-freeradius-postgresql-debuginforedhat-upgrade-freeradius-pythonredhat-upgrade-freeradius-restredhat-upgrade-freeradius-rest-debuginforedhat-upgrade-freeradius-sqliteredhat-upgrade-freeradius-sqlite-debuginforedhat-upgrade-freeradius-unixodbcredhat-upgrade-freeradius-unixodbc-debuginforedhat-upgrade-freeradius-utilsredhat-upgrade-freeradius-utils-debuginforedhat-upgrade-krb5-debuginforedhat-upgrade-krb5-debugsourceredhat-upgrade-krb5-develredhat-upgrade-krb5-devel-debuginforedhat-upgrade-krb5-libsredhat-upgrade-krb5-libs-debuginforedhat-upgrade-krb5-pkinitredhat-upgrade-krb5-pkinit-debuginforedhat-upgrade-krb5-serverredhat-upgrade-krb5-server-debuginforedhat-upgrade-krb5-server-ldapredhat-upgrade-krb5-server-ldap-debuginforedhat-upgrade-krb5-workstationredhat-upgrade-krb5-workstation-debuginforedhat-upgrade-libkadm5redhat-upgrade-libkadm5-debuginforedhat-upgrade-python3-freeradiusredhat-upgrade-python3-freeradius-debuginfo | Jul 25, 2024 | Jul 9, 2024 | |
| Rocky_linux | rocky-upgrade-freeradiusrocky-upgrade-freeradius-debuginforocky-upgrade-freeradius-debugsourcerocky-upgrade-freeradius-develrocky-upgrade-freeradius-docrocky-upgrade-freeradius-krb5rocky-upgrade-freeradius-krb5-debuginforocky-upgrade-freeradius-ldaprocky-upgrade-freeradius-ldap-debuginforocky-upgrade-freeradius-mysqlrocky-upgrade-freeradius-mysql-debuginforocky-upgrade-freeradius-perlrocky-upgrade-freeradius-perl-debuginforocky-upgrade-freeradius-postgresqlrocky-upgrade-freeradius-postgresql-debuginforocky-upgrade-freeradius-restrocky-upgrade-freeradius-rest-debuginforocky-upgrade-freeradius-sqliterocky-upgrade-freeradius-sqlite-debuginforocky-upgrade-freeradius-unixodbcrocky-upgrade-freeradius-unixodbc-debuginforocky-upgrade-freeradius-utilsrocky-upgrade-freeradius-utils-debuginforocky-upgrade-krb5-debuginforocky-upgrade-krb5-debugsourcerocky-upgrade-krb5-develrocky-upgrade-krb5-devel-debuginforocky-upgrade-krb5-libsrocky-upgrade-krb5-libs-debuginforocky-upgrade-krb5-pkinitrocky-upgrade-krb5-pkinit-debuginforocky-upgrade-krb5-serverrocky-upgrade-krb5-server-debuginforocky-upgrade-krb5-server-ldaprocky-upgrade-krb5-server-ldap-debuginforocky-upgrade-krb5-workstationrocky-upgrade-krb5-workstation-debuginforocky-upgrade-libkadm5rocky-upgrade-libkadm5-debuginforocky-upgrade-python3-freeradiusrocky-upgrade-python3-freeradius-debuginfo | Aug 1, 2024 | Jul 9, 2024 | |
| Suse | — | suse-upgrade-freeradius-serversuse-upgrade-freeradius-server-develsuse-upgrade-freeradius-server-docsuse-upgrade-freeradius-server-krb5suse-upgrade-freeradius-server-ldapsuse-upgrade-freeradius-server-ldap-schemassuse-upgrade-freeradius-server-libssuse-upgrade-freeradius-server-mysqlsuse-upgrade-freeradius-server-perlsuse-upgrade-freeradius-server-postgresqlsuse-upgrade-freeradius-server-pythonsuse-upgrade-freeradius-server-python3suse-upgrade-freeradius-server-sqlitesuse-upgrade-freeradius-server-utils | Jul 10, 2024 | Jul 9, 2024 |
| Ubuntu | ubuntu-pro-upgrade-libk5crypto3ubuntu-pro-upgrade-libkrad0ubuntu-upgrade-freeradiusubuntu-upgrade-libk5crypto3ubuntu-upgrade-libkrad0 | Oct 4, 2024 | Jul 9, 2024 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jul 2, 2025 | Jul 9, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub