CVE Intelligence

Freeradius vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Freeradius products: 1 record(s), with severity, exploitation and fixes.

Freeradius 1

Exploited only (KEV) →

CVE-2024-3596 Critical · 9.0 CWE-354 Jul 9, 2024
RADIUS Protocol under RFC2865 is vulnerable to forgery attacks.
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.