Critical Forgery Vulnerability in FreeRADIUS Package
Summary
ALPINE-CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix colli... Affects freeradius versions < 3.0.27-r0. Fixed in 3.0.27-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeRADIUS is an open-source RADIUS server that provides authentication, authorization, and accounting services for network access. It is widely used in various environments, including ISPs, enterprises, and educational institutions. The package is known for its flexibility and scalability, allowing it to handle a large number of users and requests. However, it is currently susceptible to a critical vulnerability that can be exploited by local attackers.
Vulnerability Detail
The vulnerability identified as CVE-2024-3596 affects the RADIUS Protocol as defined in RFC 2865. It allows a local attacker to perform forgery attacks by modifying valid responses (Access-Accept, Access-Reject, or Access-Challenge) to any other response. This is achieved through a chosen-prefix collision attack against the MD5 Response Authenticator signature. The implications of this vulnerability are severe, as it can lead to unauthorized access and manipulation of network services, potentially compromising sensitive data and user accounts.
How To Fix
Minimum fixed version
3.0.27-r0
This is the first release that contains the fix.
sudo apk add --upgrade freeradiusTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, it is advisable to restrict access to the RADIUS server to trusted local users only, thereby minimizing the risk of exploitation until the package can be updated.
Conclusion
The CVE-2024-3596 vulnerability in the FreeRADIUS package poses a significant risk to network security. It is crucial for users to update to the patched version to mitigate the risk of exploitation. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for freeradius →
FAQ
CVE-2024-3596 is a critical vulnerability in the FreeRADIUS package that allows local attackers to forge RADIUS responses, potentially leading to unauthorized access.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without any signup.
The CVSS score for CVE-2024-3596 is 9.0, indicating a critical level of severity.
Exploitation of this vulnerability can lead to unauthorized access to network services, manipulation of user accounts, and compromise of sensitive data.
Yes, a patch is available in version 3.0.27-r0 of the FreeRADIUS package. Users are encouraged to update to this version or later.
References
Related vulnerabilities
Recent vulnerabilities recorded for freeradius.
