跳转到帖子

Alma Linux: CVE-2024-3596: Important: krb5 security update (Multiple Advisories)

recommended_posts

发布于
  • Members

Alma Linux: CVE-2024-3596: Important: krb5 security update (Multiple Advisories)

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
07/09/2024
Created
08/08/2024
Added
08/08/2024
Modified
02/11/2025

Description

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

Solution(s)

  • alma-upgrade-freeradius
  • alma-upgrade-freeradius-devel
  • alma-upgrade-freeradius-doc
  • alma-upgrade-freeradius-krb5
  • alma-upgrade-freeradius-ldap
  • alma-upgrade-freeradius-mysql
  • alma-upgrade-freeradius-perl
  • alma-upgrade-freeradius-postgresql
  • alma-upgrade-freeradius-rest
  • alma-upgrade-freeradius-sqlite
  • alma-upgrade-freeradius-unixodbc
  • alma-upgrade-freeradius-utils
  • alma-upgrade-krb5-devel
  • alma-upgrade-krb5-libs
  • alma-upgrade-krb5-pkinit
  • alma-upgrade-krb5-server
  • alma-upgrade-krb5-server-ldap
  • alma-upgrade-krb5-workstation
  • alma-upgrade-libkadm5
  • alma-upgrade-python3-freeradius

References

  • https://attackerkb.com/topics/cve-2024-3596
  • CVE - 2024-3596
  • https://errata.almalinux.org/8/ALSA-2024-4936.html
  • https://errata.almalinux.org/8/ALSA-2024-8860.html
  • https://errata.almalinux.org/9/ALSA-2024-4935.html
  • https://errata.almalinux.org/9/ALSA-2024-9474.html
  • 查看数 702
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…