Freeradius Freeradius vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Freeradius Freeradius: 1 record(s), with affected versions and fixes.
cpe:2.3:a:freeradius:freeradius

CVE-2024-3596 Critical · 9.0 CWE-354 Jul 9, 2024

RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.