CVE-2024-3596
freeradius: forgery attack
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Amazon (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Ubuntu (orta).
Açıklama
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | krb5, krb5-devel, krb5-lang | 1.17-14.ph4 |
| Photon OS 5.0 | krb5, krb5-devel, krb5-doc ve 1 tane daha | 1.20.2-7.ph5 |
| alma 8 | freeradius:3.0::freeradius, freeradius:3.0::freeradius-devel, freeradius:3.0::freeradius-doc ve 17 tane daha | 3.0.20-15.module_el8.10.0+3873+5b7fed0f ve 1 tane daha |
| alma 9 | freeradius, freeradius-devel, freeradius-doc ve 17 tane daha | 3.0.21-40.el9_4 ve 1 tane daha |
| alpine 3.18 | freeradius | 3.0.27-r0 |
| alpine 3.19 | freeradius | 3.0.27-r0 |
| alpine 3.20 | freeradius | 3.0.27-r0 |
| alpine 3.21 | freeradius | 3.0.27-r0 |
| alpine 3.22 | freeradius | 3.0.27-r0 |
| alpine 3.23 | freeradius | 3.0.27-r0 |
| alpine 3.24 | freeradius | 3.0.27-r0 |
| alpine edge | freeradius | 3.0.27-r0 |
47 kaynaktaki 224 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 4.0 | krb5 | 1.17-14.ph4 |
| Photon OS 4.0 | krb5-devel | 1.17-14.ph4 |
| Photon OS 4.0 | krb5-lang | 1.17-14.ph4 |
| Photon OS 5.0 | krb5 | 1.20.2-7.ph5 |
| Photon OS 5.0 | krb5-devel | 1.20.2-7.ph5 |
| Photon OS 5.0 | krb5-doc | 1.20.2-7.ph5 |
| Photon OS 5.0 | krb5-lang | 1.20.2-7.ph5 |
| alma 8 | freeradius:3.0::freeradius | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-devel | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-doc | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-krb5 | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-ldap | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-mysql | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-perl | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-postgresql | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-rest | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-sqlite | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-unixODBC | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::freeradius-utils | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | freeradius:3.0::python3-freeradius | 3.0.20-15.module_el8.10.0+3873+5b7fed0f |
| alma 8 | krb5-devel | 1.18.2-30.el8_10 |
| alma 8 | krb5-libs | 1.18.2-30.el8_10 |
| alma 8 | krb5-pkinit | 1.18.2-30.el8_10 |
| alma 8 | krb5-server | 1.18.2-30.el8_10 |
| alma 8 | krb5-server-ldap | 1.18.2-30.el8_10 |
| alma 8 | krb5-workstation | 1.18.2-30.el8_10 |
| alma 8 | libkadm5 | 1.18.2-30.el8_10 |
| alma 9 | freeradius | 3.0.21-40.el9_4 |
| alma 9 | freeradius-devel | 3.0.21-40.el9_4 |
| alma 9 | freeradius-doc | 3.0.21-40.el9_4 |
| alma 9 | freeradius-krb5 | 3.0.21-40.el9_4 |
| alma 9 | freeradius-ldap | 3.0.21-40.el9_4 |
| alma 9 | freeradius-mysql | 3.0.21-40.el9_4 |
| alma 9 | freeradius-perl | 3.0.21-40.el9_4 |
| alma 9 | freeradius-postgresql | 3.0.21-40.el9_4 |
| alma 9 | freeradius-rest | 3.0.21-40.el9_4 |
| alma 9 | freeradius-sqlite | 3.0.21-40.el9_4 |
| alma 9 | freeradius-unixODBC | 3.0.21-40.el9_4 |
| alma 9 | freeradius-utils | 3.0.21-40.el9_4 |
| alma 9 | krb5-devel | 1.21.1-4.el9_5 |
| alma 9 | krb5-libs | 1.21.1-4.el9_5 |
| alma 9 | krb5-pkinit | 1.21.1-4.el9_5 |
| alma 9 | krb5-server | 1.21.1-4.el9_5 |
| alma 9 | krb5-server-ldap | 1.21.1-4.el9_5 |
| alma 9 | krb5-workstation | 1.21.1-4.el9_5 |
| alma 9 | libkadm5 | 1.21.1-4.el9_5 |
| alma 9 | python3-freeradius | 3.0.21-40.el9_4 |
| alpine 3.18 | freeradius | 3.0.27-r0 |
| alpine 3.19 | freeradius | 3.0.27-r0 |
| alpine 3.20 | freeradius | 3.0.27-r0 |
| alpine 3.21 | freeradius | 3.0.27-r0 |
| alpine 3.22 | freeradius | 3.0.27-r0 |
| alpine 3.23 | freeradius | 3.0.27-r0 |
| alpine 3.24 | freeradius | 3.0.27-r0 |
| alpine edge | freeradius | 3.0.27-r0 |
| amazon linux 2 | freeradius | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-debuginfo | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-devel | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-doc | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-krb5 | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-ldap | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-mysql | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-perl | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-postgresql | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-python | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-sqlite | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-unixODBC | 3.0.27-1.amzn2.0.1 |
| amazon linux 2 | freeradius-utils | 3.0.27-1.amzn2.0.1 |
| debian 11 | freeradius | düzeltme belirtilmemiş |
| debian 12 | freeradius | düzeltme belirtilmemiş |
| debian 13 | freeradius | 3.2.5+dfsg-1 |
| debian 14 | freeradius | 3.2.5+dfsg-1 |
| echo | freeradius | 3.2.5+dfsg-1 |
| Oracle Linux 7 | freeradius | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-devel | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-doc | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-krb5 | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-ldap | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-mysql | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-perl | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-postgresql | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-python | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-sqlite | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-unixODBC | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | freeradius-utils | 3.0.13-15.0.1.el7 |
| Oracle Linux 7 | krb5-devel | 1.15.1-55.0.7.el7_9 |
| Oracle Linux 7 | krb5-libs | 1.15.1-55.0.7.el7_9 |
| Oracle Linux 7 | krb5-pkinit | 1.15.1-55.0.7.el7_9 |
| Oracle Linux 7 | krb5-server | 1.15.1-55.0.7.el7_9 |
| Oracle Linux 7 | krb5-server-ldap | 1.15.1-55.0.7.el7_9 |
| Oracle Linux 7 | krb5-workstation | 1.15.1-55.0.7.el7_9 |
| Oracle Linux 7 | libkadm5 | 1.15.1-55.0.7.el7_9 |
| Oracle Linux 8 | freeradius | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-devel | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-doc | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-krb5 | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-ldap | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-mysql | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-perl | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-postgresql | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-rest | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-sqlite | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-unixODBC | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | freeradius-utils | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 8 | krb5-devel | 1.18.2-30.0.1.el8_10 |
| Oracle Linux 8 | krb5-libs | 1.18.2-30.0.1.el8_10 |
| Oracle Linux 8 | krb5-pkinit | 1.18.2-30.0.1.el8_10 |
| Oracle Linux 8 | krb5-server | 1.18.2-30.0.1.el8_10 |
| Oracle Linux 8 | krb5-server-ldap | 1.18.2-30.0.1.el8_10 |
| Oracle Linux 8 | krb5-workstation | 1.18.2-30.0.1.el8_10 |
| Oracle Linux 8 | libkadm5 | 1.18.2-30.0.1.el8_10 |
| Oracle Linux 8 | python3-freeradius | 3.0.20-15.module+el8.10.0+90375+641abe33 |
| Oracle Linux 9 | freeradius | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-devel | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-doc | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-krb5 | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-ldap | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-mysql | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-perl | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-postgresql | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-rest | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-sqlite | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-unixODBC | 3.0.21-40.el9_4 |
| Oracle Linux 9 | freeradius-utils | 3.0.21-40.el9_4 |
| Oracle Linux 9 | krb5-devel | 1.21.1-4.0.1.el9_5 |
| Oracle Linux 9 | krb5-libs | 1.21.1-4.0.1.el9_5 |
| Oracle Linux 9 | krb5-pkinit | 1.21.1-4.0.1.el9_5 |
| Oracle Linux 9 | krb5-server | 1.21.1-4.0.1.el9_5 |
| Oracle Linux 9 | krb5-server-ldap | 1.21.1-4.0.1.el9_5 |
| Oracle Linux 9 | krb5-workstation | 1.21.1-4.0.1.el9_5 |
| Oracle Linux 9 | libkadm5 | 1.21.1-4.0.1.el9_5 |
| Oracle Linux 9 | python3-freeradius | 3.0.21-40.el9_4 |
| rapidfort alpine 3.20 | freeradius | 3.0.27-r0 |
| rapidfort alpine 3.22 | freeradius | 3.0.27-r0 |
| rapidfort alpine 3.23 | freeradius | 3.0.27-r0 |
| rapidfort alpine 3.24 | freeradius | 3.0.27-r0 |
| rapidfort debian 12 | freeradius | 0:3.2.5+dfsg-1 |
| rapidfort debian 13 | freeradius | 0:3.2.5+dfsg-1 |
| rapidfort Oracle Linux 9 | freeradius | 0:3.0.21-40.el9_4 |
| rapidfort Oracle Linux 9 | freeradius-devel | 0:3.0.21-40.el9_4 |
| rapidfort Oracle Linux 9 | freeradius-doc | 0:3.0.21-40.el9_4 |
| rapidfort Oracle Linux 9 | freeradius-krb5 | 0:3.0.21-40.el9_4 |
| rapidfort Oracle Linux 9 | freeradius-ldap | 0:3.0.21-40.el9_4 |
| rapidfort Oracle Linux 9 | freeradius-utils | 0:3.0.21-40.el9_4 |
| rapidfort Oracle Linux 9 | krb5-devel | 0:1.21.1-4.0.1.el9_5 |
| rapidfort Oracle Linux 9 | krb5-libs | 0:1.21.1-4.0.1.el9_5 |
| rapidfort Oracle Linux 9 | krb5-pkinit | 0:1.21.1-4.0.1.el9_5 |
| rapidfort Oracle Linux 9 | krb5-server | 0:1.21.1-4.0.1.el9_5 |
| rapidfort Oracle Linux 9 | krb5-server-ldap | 0:1.21.1-4.0.1.el9_5 |
| rapidfort Oracle Linux 9 | krb5-workstation | 0:1.21.1-4.0.1.el9_5 |
| rapidfort Oracle Linux 9 | libkadm5 | 0:1.21.1-4.0.1.el9_5 |
| rapidfort Oracle Linux 9 | python3-freeradius | 0:3.0.21-40.el9_4 |
| rapidfort ubuntu | krb5 | düzeltme belirtilmemiş |
| rapidfort ubuntu | rf-krb5 | düzeltme belirtilmemiş |
| rapidfort ubuntu 20.04 | freeradius | 0:3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3, 0:3.2.5+dfsg-3~ubuntu24.04.1 |
| rapidfort ubuntu 20.04 | krb5 | 0:1.20.1-6ubuntu2.3 |
| rapidfort ubuntu 20.04 | rf-krb5 | 0:1.20.1-6ubuntu2.3, 0:1.21.3-3ubuntu0.1 |
| rapidfort ubuntu 22.04 | freeradius | 0:3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3, 0:3.2.5+dfsg-3~ubuntu24.04.1 |
| rapidfort ubuntu 22.04 | krb5 | 0:1.20.1-6ubuntu2.3 |
| rapidfort ubuntu 22.04 | rf-krb5 | 0:1.20.1-6ubuntu2.3, 0:1.21.3-3ubuntu0.1 |
| rapidfort ubuntu 24.04 | freeradius | 0:3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3, 0:3.2.5+dfsg-3~ubuntu24.04.1 |
| rapidfort ubuntu 24.04 | krb5 | 0:1.20.1-6ubuntu2.3 |
| rapidfort ubuntu 24.04 | rf-krb5 | 0:1.20.1-6ubuntu2.3, 0:1.21.3-3ubuntu0.1 |
| Red Hat | freeradius | düzeltme belirtilmemiş |
| Red Hat | freeradius-krb5 | düzeltme belirtilmemiş |
| Red Hat | freeradius-ldap | düzeltme belirtilmemiş |
| Red Hat | freeradius-mysql | düzeltme belirtilmemiş |
| Red Hat | freeradius-perl | düzeltme belirtilmemiş |
| Red Hat | freeradius-postgresql | düzeltme belirtilmemiş |
| Red Hat | freeradius-python | düzeltme belirtilmemiş |
| Red Hat | freeradius-unixODBC | düzeltme belirtilmemiş |
| Red Hat | freeradius-utils | düzeltme belirtilmemiş |
| rocky 8 | freeradius:3.0::freeradius | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-devel | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-doc | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-krb5 | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-ldap | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-mysql | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-perl | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-postgresql | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-rest | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-sqlite | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-unixODBC | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::freeradius-utils | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | freeradius:3.0::python3-freeradius | 3.0.20-15.module+el8.10.0+1841+f214069a |
| rocky 8 | krb5-devel | 1.18.2-30.el8_10 |
| rocky 8 | krb5-libs | 1.18.2-30.el8_10 |
| rocky 8 | krb5-pkinit | 1.18.2-30.el8_10 |
| rocky 8 | krb5-server | 1.18.2-30.el8_10 |
| rocky 8 | krb5-server-ldap | 1.18.2-30.el8_10 |
| rocky 8 | krb5-workstation | 1.18.2-30.el8_10 |
| rocky 8 | libkadm5 | 1.18.2-30.el8_10 |
| rocky 9 | freeradius | 3.0.21-40.el9_4 |
| rocky 9 | freeradius-devel | 3.0.21-40.el9_4 |
| rocky 9 | freeradius-doc | 3.0.21-40.el9_4 |
| rocky 9 | freeradius-krb5 | 3.0.21-40.el9_4 |
| rocky 9 | freeradius-ldap | 3.0.21-40.el9_4 |
| rocky 9 | freeradius-utils | 3.0.21-40.el9_4 |
| rocky 9 | krb5-devel | 1.21.1-4.el9_5 |
| rocky 9 | krb5-libs | 1.21.1-4.el9_5 |
| rocky 9 | krb5-pkinit | 1.21.1-4.el9_5 |
| rocky 9 | krb5-server | 1.21.1-4.el9_5 |
| rocky 9 | krb5-server-ldap | 1.21.1-4.el9_5 |
| rocky 9 | krb5-workstation | 1.21.1-4.el9_5 |
| rocky 9 | libkadm5 | 1.21.1-4.el9_5 |
| rocky 9 | python3-freeradius | 3.0.21-40.el9_4 |
| seal Red Hat 8 | krb5 | 1.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999 |
| seal Red Hat 8 | seal-krb5 | 1.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999 |
| ubuntu 16.04-ESM | krb5 | 1.13.2+dfsg-5ubuntu2.2+esm6 |
| ubuntu 18.04-ESM | freeradius | düzeltme belirtilmemiş |
| ubuntu 18.04-ESM | krb5 | 1.16-2ubuntu0.4+esm3 |
| ubuntu 20.04 | freeradius | 3.0.20+dfsg-3ubuntu0.4 |
| ubuntu 20.04 | krb5 | 1.17-6ubuntu4.8 |
| ubuntu 20.04-ESM | freeradius | 3.0.20+dfsg-3ubuntu0.4 |
| ubuntu 20.04-ESM | krb5 | 1.17-6ubuntu4.8 |
| ubuntu 22.04 | freeradius | 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3 |
| ubuntu 22.04 | krb5 | 1.19.2-2ubuntu0.5 |
| ubuntu 24.04 | freeradius | 3.2.5+dfsg-3~ubuntu24.04.1 |
| ubuntu 24.04 | krb5 | 1.20.1-6ubuntu2.3 |
| ubuntu 24.10 | krb5 | 1.21.3-3ubuntu0.1 |
| ubuntu 25.04 | krb5 | 1.21.3-4ubuntu1 |
| ubuntu 25.10 | krb5 | 1.21.3-4ubuntu1 |
| ubuntu 26.04 | krb5 | 1.21.3-4ubuntu1 |
| ubuntu 26.10 | krb5 | 1.21.3-4ubuntu1 |
Referanslar
- http://www.openwall.com/lists/oss-security/2024/07/09/4
- https://access.redhat.com/errata/RHSA-2024:9474
- https://access.redhat.com/security/cve/CVE-2024-3596
- https://bugzilla.redhat.com/2263240
- https://bugzilla.redhat.com/show_bug.cgi?id=2263240
- https://cert-portal.siemens.com/productcert/html/ssa-364175.html
- https://cert-portal.siemens.com/productcert/html/ssa-723487.html
- https://cert-portal.siemens.com/productcert/html/ssa-770770.html
29 referansın hepsi
- https://cert-portal.siemens.com/productcert/html/ssa-794185.html
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596
- https://datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/
- https://datatracker.ietf.org/doc/html/rfc2865
- https://errata.almalinux.org/9/ALSA-2024-9474.html
- https://errata.rockylinux.org/RLSA-2024:9474
- https://kb.cert.org/vince/comm/case/1515/
- https://linux.oracle.com/cve/CVE-2024-3596.html
- https://linux.oracle.com/errata/ELSA-2024-9474.html
- https://networkradius.com/assets/pdf/radius_and_md5_collisions.pdf
- https://nvd.nist.gov/vuln/detail/CVE-2024-3596
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014
- https://security.netapp.com/advisory/ntap-20240822-0001/
- https://today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocol
- https://ubuntu.com/security/notices/USN-7055-1
- https://ubuntu.com/security/notices/USN-7257-1
- https://w1.fi/security/2024-1/hostapd-and-radius-protocol-forgery-attacks.txt
- https://www.blastradius.fail/
- https://www.cve.org/CVERecord?id=CVE-2024-3596
- https://www.kb.cert.org/vuls/id/456537