CVE-2024-3596: broadcom brocade_sannav

CVSS: 9.0v3.1CriticalModified

AliasesALPINE-CVE-2024-3596MGASA-2024-0264MGASA-2024-0385+28 more

Published 09-07-2024Last modified 15-10-2026

Vulnerability summary

CVE-2024-3596 is a critical (CVSS 9.0) vulnerability in broadcom brocade_sannav. EPSS estimates a 14.86% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.0/10

010

Critical · v3.1 (CVE.org)

EPSS score

14.86%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

09-07-2024
PublishedVulnerability first disclosed.
15-10-2026
Last modifiedVulnerability information updated.

Description

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

CVSS metrics

6 scores · 6 sources · 1 version

v3.19.0

EPSS trend

Probability

14.86%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 14.86% on 18-09-2026

18-09-202618-10-2026

EPSS score

14.86%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat43 products

freeradius< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-debugsource< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-devel< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-doc< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca

freeradius-krb5< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-krb5-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-ldap< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-ldap-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-mysql< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-mysql-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-perl< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-perl-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-postgresql< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-postgresql-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-python< 0:3.0.20-1.el7_9.1
freeradius-rest< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-rest-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-sqlite< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-sqlite-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-unixODBC< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-unixODBC-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-utils< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.20-1.el7_9.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
freeradius-utils-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
krb5< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-debuginfo< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-debugsource< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-devel< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-devel-debuginfo< 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-libs< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-libs-debuginfo< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-pkinit< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-pkinit-debuginfo< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-server< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-server-debuginfo< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-server-ldap< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-server-ldap-debuginfo< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-workstation< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
krb5-workstation-debuginfo< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
libkadm5< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.15.1-55.el7_9.3 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
libkadm5-debuginfo< 0:1.21.1-4.el9_5 | < 0:1.21.1-2.el9_4.1 | < 0:1.20.1-9.el9_2.2 | < 0:1.19.1-16.el9_0.2 | < 0:1.17-19.el8_2.2 | < 0:1.18.2-9.el8_4.2 | < 0:1.18.2-26.el8_8.3 | < 0:1.18.2-16.el8_6.2 | < 0:1.18.2-30.el8_10
python3-freeradius< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca
python3-freeradius-debuginfo< 0:3.0.20-12.module+el8.6.0+22086+569c8c49.1 | < 0:3.0.21-38.el9_2.2 | < 0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1 | < 0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1 | < 0:3.0.21-26.el9_0.1 | < 0:3.0.21-40.el9_4 | < 0:3.0.20-15.module+el8.10.0+22065+aa3d48ca

Show all 43

Suse18 products

freeradius-server&distro=SUSE Enterprise Storage 7.1< 3.0.21-150200.3.15.1
freeradius-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 3.0.21-150200.3.15.1
freeradius-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 3.0.21-150200.3.15.1
freeradius-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS< 3.0.25-150400.4.7.1
freeradius-server&distro=SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS< 3.0.25-150400.4.7.1

Show all 18

Opensuse3 products

freeradius-server&distro=openSUSE Leap 15.5< 3.0.25-150400.4.7.1
freeradius-server&distro=openSUSE Leap 15.6< 3.2.4-150600.3.3.2
radcli&distro=openSUSE Tumbleweed< 1.5.0-1.1

Ubuntu3 products

freeradiusAll versions (No fix recorded) | < 3.0.20+dfsg-3ubuntu0.4 | < 3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3 | < 3.2.5+dfsg-3~ubuntu24.04.1
krb5< 1.12+dfsg-2ubuntu5.4+esm6 | < 1.13.2+dfsg-5ubuntu2.2+esm6 | < 1.16-2ubuntu0.4+esm3 | < 1.17-6ubuntu4.8 | < 1.19.2-2ubuntu0.5 | < 1.20.1-6ubuntu2.3
libpam-radius-authAll versions (No fix recorded)

Broadcom2 products

Mageia2 products

freeradius< 3.0.27-1.mga9
krb5< 1.20.1-1.3.mga9

Alpine1 product

freeradius< 3.0.27-r0

Debian1 product

freeradiusAll versions (No fix recorded) | < 3.2.5+dfsg-1

Freeradius1 product

freeradius< 3.0.27

Ietf1 product

rfc2865

Sonicwall1 product

sonicosna

11 vendors · 76 products

References

78 links

datatracker.ietf.org/doc/html/rfc2865ARTICLETechnical Description
datatracker.ietf.org/doc/draft-ietf-radext-deprecating-radius/ARTICLETechnical Description
networkradius.com/assets/pdf/radius_and_md5_collisions.pdfARTICLEREPORTThird Party Advisory
www.blastradius.failARTICLEREPORTTechnical Description
www.openwall.com/lists/oss-security/2024/07/09/4Mailing List
psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0014Third Party Advisory
cert-portal.siemens.com/productcert/html/ssa-794185.htmlVendor Advisory
cert-portal.siemens.com/productcert/html/ssa-723487.htmlVendor Advisory
security.netapp.com/advisory/ntap-20240822-0001/Third Party Advisory
today.ucsd.edu/story/computer-scientists-discover-vulnerabilities-in-a-popular-security-protocolThird Party Advisory

Show all 78 references

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities