Zafiyetler / CVE-2024-3596

kritik

CVE-2024-3596

freeradius: forgery attack

Yayın Değişiklik CWE 354, 924
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.

Kaynağa göre önem derecesi

NVD9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Red Hat9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Amazon (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Ubuntu (orta).

Açıklama

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

Etkilenen paketler ve düzeltilmiş sürümler

KaynakPaketDüzeltildiği sürüm
Photon OS 4.0krb5, krb5-devel, krb5-lang1.17-14.ph4
Photon OS 5.0krb5, krb5-devel, krb5-doc ve 1 tane daha1.20.2-7.ph5
alma 8freeradius:3.0::freeradius, freeradius:3.0::freeradius-devel, freeradius:3.0::freeradius-doc ve 17 tane daha3.0.20-15.module_el8.10.0+3873+5b7fed0f ve 1 tane daha
alma 9freeradius, freeradius-devel, freeradius-doc ve 17 tane daha3.0.21-40.el9_4 ve 1 tane daha
alpine 3.18freeradius3.0.27-r0
alpine 3.19freeradius3.0.27-r0
alpine 3.20freeradius3.0.27-r0
alpine 3.21freeradius3.0.27-r0
alpine 3.22freeradius3.0.27-r0
alpine 3.23freeradius3.0.27-r0
alpine 3.24freeradius3.0.27-r0
alpine edgefreeradius3.0.27-r0
47 kaynaktaki 224 kaydın hepsini göster
KaynakPaketDüzeltildiği sürüm
Photon OS 4.0krb51.17-14.ph4
Photon OS 4.0krb5-devel1.17-14.ph4
Photon OS 4.0krb5-lang1.17-14.ph4
Photon OS 5.0krb51.20.2-7.ph5
Photon OS 5.0krb5-devel1.20.2-7.ph5
Photon OS 5.0krb5-doc1.20.2-7.ph5
Photon OS 5.0krb5-lang1.20.2-7.ph5
alma 8freeradius:3.0::freeradius3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-devel3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-doc3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-krb53.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-ldap3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-mysql3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-perl3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-postgresql3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-rest3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-sqlite3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-unixODBC3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::freeradius-utils3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8freeradius:3.0::python3-freeradius3.0.20-15.module_el8.10.0+3873+5b7fed0f
alma 8krb5-devel1.18.2-30.el8_10
alma 8krb5-libs1.18.2-30.el8_10
alma 8krb5-pkinit1.18.2-30.el8_10
alma 8krb5-server1.18.2-30.el8_10
alma 8krb5-server-ldap1.18.2-30.el8_10
alma 8krb5-workstation1.18.2-30.el8_10
alma 8libkadm51.18.2-30.el8_10
alma 9freeradius3.0.21-40.el9_4
alma 9freeradius-devel3.0.21-40.el9_4
alma 9freeradius-doc3.0.21-40.el9_4
alma 9freeradius-krb53.0.21-40.el9_4
alma 9freeradius-ldap3.0.21-40.el9_4
alma 9freeradius-mysql3.0.21-40.el9_4
alma 9freeradius-perl3.0.21-40.el9_4
alma 9freeradius-postgresql3.0.21-40.el9_4
alma 9freeradius-rest3.0.21-40.el9_4
alma 9freeradius-sqlite3.0.21-40.el9_4
alma 9freeradius-unixODBC3.0.21-40.el9_4
alma 9freeradius-utils3.0.21-40.el9_4
alma 9krb5-devel1.21.1-4.el9_5
alma 9krb5-libs1.21.1-4.el9_5
alma 9krb5-pkinit1.21.1-4.el9_5
alma 9krb5-server1.21.1-4.el9_5
alma 9krb5-server-ldap1.21.1-4.el9_5
alma 9krb5-workstation1.21.1-4.el9_5
alma 9libkadm51.21.1-4.el9_5
alma 9python3-freeradius3.0.21-40.el9_4
alpine 3.18freeradius3.0.27-r0
alpine 3.19freeradius3.0.27-r0
alpine 3.20freeradius3.0.27-r0
alpine 3.21freeradius3.0.27-r0
alpine 3.22freeradius3.0.27-r0
alpine 3.23freeradius3.0.27-r0
alpine 3.24freeradius3.0.27-r0
alpine edgefreeradius3.0.27-r0
amazon linux 2freeradius3.0.27-1.amzn2.0.1
amazon linux 2freeradius-debuginfo3.0.27-1.amzn2.0.1
amazon linux 2freeradius-devel3.0.27-1.amzn2.0.1
amazon linux 2freeradius-doc3.0.27-1.amzn2.0.1
amazon linux 2freeradius-krb53.0.27-1.amzn2.0.1
amazon linux 2freeradius-ldap3.0.27-1.amzn2.0.1
amazon linux 2freeradius-mysql3.0.27-1.amzn2.0.1
amazon linux 2freeradius-perl3.0.27-1.amzn2.0.1
amazon linux 2freeradius-postgresql3.0.27-1.amzn2.0.1
amazon linux 2freeradius-python3.0.27-1.amzn2.0.1
amazon linux 2freeradius-sqlite3.0.27-1.amzn2.0.1
amazon linux 2freeradius-unixODBC3.0.27-1.amzn2.0.1
amazon linux 2freeradius-utils3.0.27-1.amzn2.0.1
debian 11freeradiusdüzeltme belirtilmemiş
debian 12freeradiusdüzeltme belirtilmemiş
debian 13freeradius3.2.5+dfsg-1
debian 14freeradius3.2.5+dfsg-1
echofreeradius3.2.5+dfsg-1
Oracle Linux 7freeradius3.0.13-15.0.1.el7
Oracle Linux 7freeradius-devel3.0.13-15.0.1.el7
Oracle Linux 7freeradius-doc3.0.13-15.0.1.el7
Oracle Linux 7freeradius-krb53.0.13-15.0.1.el7
Oracle Linux 7freeradius-ldap3.0.13-15.0.1.el7
Oracle Linux 7freeradius-mysql3.0.13-15.0.1.el7
Oracle Linux 7freeradius-perl3.0.13-15.0.1.el7
Oracle Linux 7freeradius-postgresql3.0.13-15.0.1.el7
Oracle Linux 7freeradius-python3.0.13-15.0.1.el7
Oracle Linux 7freeradius-sqlite3.0.13-15.0.1.el7
Oracle Linux 7freeradius-unixODBC3.0.13-15.0.1.el7
Oracle Linux 7freeradius-utils3.0.13-15.0.1.el7
Oracle Linux 7krb5-devel1.15.1-55.0.7.el7_9
Oracle Linux 7krb5-libs1.15.1-55.0.7.el7_9
Oracle Linux 7krb5-pkinit1.15.1-55.0.7.el7_9
Oracle Linux 7krb5-server1.15.1-55.0.7.el7_9
Oracle Linux 7krb5-server-ldap1.15.1-55.0.7.el7_9
Oracle Linux 7krb5-workstation1.15.1-55.0.7.el7_9
Oracle Linux 7libkadm51.15.1-55.0.7.el7_9
Oracle Linux 8freeradius3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-devel3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-doc3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-krb53.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-ldap3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-mysql3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-perl3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-postgresql3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-rest3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-sqlite3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-unixODBC3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8freeradius-utils3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 8krb5-devel1.18.2-30.0.1.el8_10
Oracle Linux 8krb5-libs1.18.2-30.0.1.el8_10
Oracle Linux 8krb5-pkinit1.18.2-30.0.1.el8_10
Oracle Linux 8krb5-server1.18.2-30.0.1.el8_10
Oracle Linux 8krb5-server-ldap1.18.2-30.0.1.el8_10
Oracle Linux 8krb5-workstation1.18.2-30.0.1.el8_10
Oracle Linux 8libkadm51.18.2-30.0.1.el8_10
Oracle Linux 8python3-freeradius3.0.20-15.module+el8.10.0+90375+641abe33
Oracle Linux 9freeradius3.0.21-40.el9_4
Oracle Linux 9freeradius-devel3.0.21-40.el9_4
Oracle Linux 9freeradius-doc3.0.21-40.el9_4
Oracle Linux 9freeradius-krb53.0.21-40.el9_4
Oracle Linux 9freeradius-ldap3.0.21-40.el9_4
Oracle Linux 9freeradius-mysql3.0.21-40.el9_4
Oracle Linux 9freeradius-perl3.0.21-40.el9_4
Oracle Linux 9freeradius-postgresql3.0.21-40.el9_4
Oracle Linux 9freeradius-rest3.0.21-40.el9_4
Oracle Linux 9freeradius-sqlite3.0.21-40.el9_4
Oracle Linux 9freeradius-unixODBC3.0.21-40.el9_4
Oracle Linux 9freeradius-utils3.0.21-40.el9_4
Oracle Linux 9krb5-devel1.21.1-4.0.1.el9_5
Oracle Linux 9krb5-libs1.21.1-4.0.1.el9_5
Oracle Linux 9krb5-pkinit1.21.1-4.0.1.el9_5
Oracle Linux 9krb5-server1.21.1-4.0.1.el9_5
Oracle Linux 9krb5-server-ldap1.21.1-4.0.1.el9_5
Oracle Linux 9krb5-workstation1.21.1-4.0.1.el9_5
Oracle Linux 9libkadm51.21.1-4.0.1.el9_5
Oracle Linux 9python3-freeradius3.0.21-40.el9_4
rapidfort alpine 3.20freeradius3.0.27-r0
rapidfort alpine 3.22freeradius3.0.27-r0
rapidfort alpine 3.23freeradius3.0.27-r0
rapidfort alpine 3.24freeradius3.0.27-r0
rapidfort debian 12freeradius0:3.2.5+dfsg-1
rapidfort debian 13freeradius0:3.2.5+dfsg-1
rapidfort Oracle Linux 9freeradius0:3.0.21-40.el9_4
rapidfort Oracle Linux 9freeradius-devel0:3.0.21-40.el9_4
rapidfort Oracle Linux 9freeradius-doc0:3.0.21-40.el9_4
rapidfort Oracle Linux 9freeradius-krb50:3.0.21-40.el9_4
rapidfort Oracle Linux 9freeradius-ldap0:3.0.21-40.el9_4
rapidfort Oracle Linux 9freeradius-utils0:3.0.21-40.el9_4
rapidfort Oracle Linux 9krb5-devel0:1.21.1-4.0.1.el9_5
rapidfort Oracle Linux 9krb5-libs0:1.21.1-4.0.1.el9_5
rapidfort Oracle Linux 9krb5-pkinit0:1.21.1-4.0.1.el9_5
rapidfort Oracle Linux 9krb5-server0:1.21.1-4.0.1.el9_5
rapidfort Oracle Linux 9krb5-server-ldap0:1.21.1-4.0.1.el9_5
rapidfort Oracle Linux 9krb5-workstation0:1.21.1-4.0.1.el9_5
rapidfort Oracle Linux 9libkadm50:1.21.1-4.0.1.el9_5
rapidfort Oracle Linux 9python3-freeradius0:3.0.21-40.el9_4
rapidfort ubuntukrb5düzeltme belirtilmemiş
rapidfort ubunturf-krb5düzeltme belirtilmemiş
rapidfort ubuntu 20.04freeradius0:3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3, 0:3.2.5+dfsg-3~ubuntu24.04.1
rapidfort ubuntu 20.04krb50:1.20.1-6ubuntu2.3
rapidfort ubuntu 20.04rf-krb50:1.20.1-6ubuntu2.3, 0:1.21.3-3ubuntu0.1
rapidfort ubuntu 22.04freeradius0:3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3, 0:3.2.5+dfsg-3~ubuntu24.04.1
rapidfort ubuntu 22.04krb50:1.20.1-6ubuntu2.3
rapidfort ubuntu 22.04rf-krb50:1.20.1-6ubuntu2.3, 0:1.21.3-3ubuntu0.1
rapidfort ubuntu 24.04freeradius0:3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3, 0:3.2.5+dfsg-3~ubuntu24.04.1
rapidfort ubuntu 24.04krb50:1.20.1-6ubuntu2.3
rapidfort ubuntu 24.04rf-krb50:1.20.1-6ubuntu2.3, 0:1.21.3-3ubuntu0.1
Red Hatfreeradiusdüzeltme belirtilmemiş
Red Hatfreeradius-krb5düzeltme belirtilmemiş
Red Hatfreeradius-ldapdüzeltme belirtilmemiş
Red Hatfreeradius-mysqldüzeltme belirtilmemiş
Red Hatfreeradius-perldüzeltme belirtilmemiş
Red Hatfreeradius-postgresqldüzeltme belirtilmemiş
Red Hatfreeradius-pythondüzeltme belirtilmemiş
Red Hatfreeradius-unixODBCdüzeltme belirtilmemiş
Red Hatfreeradius-utilsdüzeltme belirtilmemiş
rocky 8freeradius:3.0::freeradius3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-devel3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-doc3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-krb53.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-ldap3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-mysql3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-perl3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-postgresql3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-rest3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-sqlite3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-unixODBC3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::freeradius-utils3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8freeradius:3.0::python3-freeradius3.0.20-15.module+el8.10.0+1841+f214069a
rocky 8krb5-devel1.18.2-30.el8_10
rocky 8krb5-libs1.18.2-30.el8_10
rocky 8krb5-pkinit1.18.2-30.el8_10
rocky 8krb5-server1.18.2-30.el8_10
rocky 8krb5-server-ldap1.18.2-30.el8_10
rocky 8krb5-workstation1.18.2-30.el8_10
rocky 8libkadm51.18.2-30.el8_10
rocky 9freeradius3.0.21-40.el9_4
rocky 9freeradius-devel3.0.21-40.el9_4
rocky 9freeradius-doc3.0.21-40.el9_4
rocky 9freeradius-krb53.0.21-40.el9_4
rocky 9freeradius-ldap3.0.21-40.el9_4
rocky 9freeradius-utils3.0.21-40.el9_4
rocky 9krb5-devel1.21.1-4.el9_5
rocky 9krb5-libs1.21.1-4.el9_5
rocky 9krb5-pkinit1.21.1-4.el9_5
rocky 9krb5-server1.21.1-4.el9_5
rocky 9krb5-server-ldap1.21.1-4.el9_5
rocky 9krb5-workstation1.21.1-4.el9_5
rocky 9libkadm51.21.1-4.el9_5
rocky 9python3-freeradius3.0.21-40.el9_4
seal Red Hat 8krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
seal Red Hat 8seal-krb51.18.2-14.0.1.el8+sp999, 1.18.2-30.el8_10+sp999
ubuntu 16.04-ESMkrb51.13.2+dfsg-5ubuntu2.2+esm6
ubuntu 18.04-ESMfreeradiusdüzeltme belirtilmemiş
ubuntu 18.04-ESMkrb51.16-2ubuntu0.4+esm3
ubuntu 20.04freeradius3.0.20+dfsg-3ubuntu0.4
ubuntu 20.04krb51.17-6ubuntu4.8
ubuntu 20.04-ESMfreeradius3.0.20+dfsg-3ubuntu0.4
ubuntu 20.04-ESMkrb51.17-6ubuntu4.8
ubuntu 22.04freeradius3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3
ubuntu 22.04krb51.19.2-2ubuntu0.5
ubuntu 24.04freeradius3.2.5+dfsg-3~ubuntu24.04.1
ubuntu 24.04krb51.20.1-6ubuntu2.3
ubuntu 24.10krb51.21.3-3ubuntu0.1
ubuntu 25.04krb51.21.3-4ubuntu1
ubuntu 25.10krb51.21.3-4ubuntu1
ubuntu 26.04krb51.21.3-4ubuntu1
ubuntu 26.10krb51.21.3-4ubuntu1

Referanslar

29 referansın hepsi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.