https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:08:45 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:4935 <p><strong>Affected:</strong> AlmaLinux:9: freeradius, AlmaLinux:9: freeradius-devel, AlmaLinux:9: freeradius-doc, AlmaLinux:9: freeradius-krb5, AlmaLinux:9: freeradius-ldap, AlmaLinux:9: freeradius-mysql, AlmaLinux:9: freeradius-perl, AlmaLinux:9: freeradius-postgresql, AlmaLinux:9: freeradius-rest, AlmaLinux:9: freeradius-sqlite and 3 more</p> <p>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.</p> <p>Security Fix(es):</p> <p>* freeradius: forgery attack (CVE-2024-3596)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: freeradius, AlmaLinux:9: freeradius-devel, AlmaLinux:9: freeradius-doc, AlmaLinux:9: freeradius-krb5, AlmaLinux:9: freeradius-ldap, AlmaLinux:9: freeradius-mysql, AlmaLinux:9: freeradius-perl, AlmaLinux:9: freeradius-postgresql, AlmaLinux:9: freeradius-rest, AlmaLinux:9: freeradius-sqlite and 3 more</p> <p>FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network.</p> <p>Security Fix(es):</p> <p>* freeradius: forgery attack (CVE-2024-3596)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:4935 https://cve.radiocsirt.org/vuln/bdu:2024-05180 bdu:2024-05180 https://cve.radiocsirt.org/vuln/bdu:2024-05180 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0550 certfr-2024-avi-0550 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0550 https://cve.radiocsirt.org/vuln/cisco-sa-radius-spoofing-july-2024-87ccdwz3 <p>On July 7, 2024, security researchers disclosed the following vulnerability in the RADIUS protocol: CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by an on-path attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. This vulnerability may impact any RADIUS client and server. For a description of this vulnerability, see VU#456537: RADIUS protocol susceptible to forgery attacks [&#34;https://www.kb.cert.org/vuls/id/456537&#34;].</p> <p>On July 7, 2024, security researchers disclosed the following vulnerability in the RADIUS protocol: CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by an on-path attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. This vulnerability may impact any RADIUS client and server. For a description of this vulnerability, see VU#456537: RADIUS protocol susceptible to forgery attacks [&#34;https://www.kb.cert.org/vuls/id/456537&#34;].</p> https://cve.radiocsirt.org/vuln/cisco-sa-radius-spoofing-july-2024-87ccdwz3 https://cve.radiocsirt.org/vuln/cnvd-2024-33450 cnvd-2024-33450 https://cve.radiocsirt.org/vuln/cnvd-2024-33450 https://cve.radiocsirt.org/vuln/essa-2024:0650 <p>security update for freeradius</p> <p>security update for freeradius</p> https://cve.radiocsirt.org/vuln/essa-2024:0650 https://cve.radiocsirt.org/vuln/euvd-2026-325750 EUVD-2026-325750 https://cve.radiocsirt.org/vuln/euvd-2026-325750 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3596 <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3596 https://cve.radiocsirt.org/vuln/ghsa-3g8x-wqfp-q876 <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> https://cve.radiocsirt.org/vuln/ghsa-3g8x-wqfp-q876 https://cve.radiocsirt.org/vuln/gsd-2024-3596 gsd-2024-3596 https://cve.radiocsirt.org/vuln/gsd-2024-3596 https://cve.radiocsirt.org/vuln/icsa-24-193-05 <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify responses Access-Reject or Access-Accept using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify responses Access-Reject or Access-Accept using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> https://cve.radiocsirt.org/vuln/icsa-24-193-05 https://cve.radiocsirt.org/vuln/oesa-2024-1878 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: freeradius, openEuler:20.03-LTS-SP4: freeradius, openEuler:24.03-LTS: freeradius, openEuler:22.03-LTS-SP4: freeradius, openEuler:22.03-LTS-SP1: freeradius</p> <p>Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service.</p> <p>Security Fix(es):</p> <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.(CVE-2024-3596)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP3: freeradius, openEuler:20.03-LTS-SP4: freeradius, openEuler:24.03-LTS: freeradius, openEuler:22.03-LTS-SP4: freeradius, openEuler:22.03-LTS-SP1: freeradius</p> <p>Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service.</p> <p>Security Fix(es):</p> <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.(CVE-2024-3596)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1878 https://cve.radiocsirt.org/vuln/rhsa-2024:10852 <p>freeradius: forgery attack pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON werkzeug: python-werkzeug: Werkzeug possible resource exhaustion when parsing file data in forms</p> <p>freeradius: forgery attack pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON werkzeug: python-werkzeug: Werkzeug possible resource exhaustion when parsing file data in forms</p> https://cve.radiocsirt.org/vuln/rhsa-2024:10852 https://cve.radiocsirt.org/vuln/sevd-2026-104-02 <p>Schneider Electric is aware of a RADIUS protocol vulnerability affecting its Modicon Network Managed Switch product. The Modicon Network Managed Switch product provides connectivity for multiple Ethernet devices, network management, enhanced cyber security and more advanced switching features. Failure to apply the mitigation provided below may risk forgery attacks in RADIUS Protocol, which could result in modification of any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response which could result in the possibility of denial of service and loss of confidentiality, integrity of the devices connected to the switch.</p> <p>Schneider Electric is aware of a RADIUS protocol vulnerability affecting its Modicon Network Managed Switch product. The Modicon Network Managed Switch product provides connectivity for multiple Ethernet devices, network management, enhanced cyber security and more advanced switching features. Failure to apply the mitigation provided below may risk forgery attacks in RADIUS Protocol, which could result in modification of any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response which could result in the possibility of denial of service and loss of confidentiality, integrity of the devices connected to the switch.</p> https://cve.radiocsirt.org/vuln/sevd-2026-104-02 https://cve.radiocsirt.org/vuln/ssa-364175 <p>The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH&#39;s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230…</p> <p>The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH&#39;s use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230…</p> https://cve.radiocsirt.org/vuln/ssa-364175 https://cve.radiocsirt.org/vuln/suse-su-2024:2359-1 <p>Security update for freeradius-server</p> <p>Security update for freeradius-server</p> https://cve.radiocsirt.org/vuln/suse-su-2024:2359-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3596 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: krb5, Ubuntu:Pro:14.04:LTS: libpam-radius-auth, Ubuntu:Pro:16.04:LTS: krb5, Ubuntu:Pro:16.04:LTS: freeradius, Ubuntu:16.04:LTS: libpam-radius-auth, Ubuntu:18.04:LTS: freeradius, Ubuntu:Pro:18.04:LTS: krb5, Ubuntu:18.04:LTS: libpam-radius-auth, Ubuntu:20.04:LTS: freeradius, Ubuntu:20.04:LTS: krb5 and 7 more</p> <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: krb5, Ubuntu:Pro:14.04:LTS: libpam-radius-auth, Ubuntu:Pro:16.04:LTS: krb5, Ubuntu:Pro:16.04:LTS: freeradius, Ubuntu:16.04:LTS: libpam-radius-auth, Ubuntu:18.04:LTS: freeradius, Ubuntu:Pro:18.04:LTS: krb5, Ubuntu:18.04:LTS: libpam-radius-auth, Ubuntu:20.04:LTS: freeradius, Ubuntu:20.04:LTS: krb5 and 7 more</p> <p>RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3596 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1578 <p>Ein lokaler Angreifer kann eine Schwachstelle im RADIUS Protokoll ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle im RADIUS Protokoll ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1578