CVE catalog

CVE-2024-3596

Kerberos vulnerability

Severity: Critical · CVSS 9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Published: Jul 9, 2024, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 14.86% · Oct 25, 2026

A vulnerability in the RADIUS (Remote Authentication Dial-In User Service) protocol allows attackers to forge authentication responses when the Message-Authenticator attribute is not enforced. This issue arises from a cryptographically insecure integrity check using MD5, enabling attackers to spoof UDP-based RADIUS response packets. This can result in unauthorized access by modifying an Access-Reject response to an Access-Accept response, thereby compromising the authentication process. freeradius: forgery attack This vulnerability is of Important severity due to its ability to undermine the fundamental security mechanisms of RADIUS-based authentication systems. By exploiting the weak MD5 integrity check, an attacker can forge RADIUS responses, effectively bypassing authentication controls and gaining unauthorized access to network resources. This poses a significant threat to environments relying on RADIUS for user and device authentication, particularly those lacking enforced Message-Authenticator attributes or TLS/DTLS encryption. There are several preconditions for this attack to be possible: * An attacker needs man-in-the-middle network access between the RADIUS client and server * The client and server must be using RADIUS/UDP to communicate * The attacker needs to be able to trigger a RADIUS client Access-Request ( for example the client is using PAP authentication) Due to these attack surface limitations, the impact is rated Important. Within Red Hat offerings, this impacts the FreeRADIUS package. This flaw allows a local, unauthenticated attacker to conduct a man-in-the-middle attack to log in as a third party without knowing their credentials. Servers using Extensible Authentication Protocol (EAP) with required Message-Authenticator attributes or those employing TLS/DTLS encryption are not affected. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	freeradius	sid	`3.2.10+dfsg-2`	fixed
Debian	freeradius	forky	`3.2.10+dfsg-2`	fixed
Debian	freeradius	trixie	`3.2.7+dfsg-1+deb13u2`	fixed
Debian	freeradius	bookworm	`3.2.1+dfsg-4+deb12u1`	vulnerable
Ubuntu	freeradius	noble	Not reported	vulnerable
Ubuntu	krb5	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-admin-server	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-doc	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-gss-samples	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-k5tls	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-kdc	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-kdc-ldap	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-kpropd	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-locales	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-multidev	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-otp	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-pkinit	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5-user	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libgssapi-krb5-2	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libgssrpc4t64	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libk5crypto3	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkadm5clnt-mit12	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkadm5srv-mit12	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkdb5-10t64	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkrad-dev	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkrad0	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkrb5-3	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkrb5-dev	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libkrb5support0	noble	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	freeradius	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-common	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-config	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-dhcp	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-iodbc	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-krb5	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-ldap	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-memcached	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-mysql	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-postgresql	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-python3	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-redis	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-rest	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-utils	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	freeradius-yubikey	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	libfreeradius-dev	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	libfreeradius3	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Cpe	freeradius	Not reported	`3.0.27`	fixed
Cpe	brocade_sannav	Not reported	Not reported	unknown
Cpe	fabric_operating_system	Not reported	Not reported	unknown
Cpe	sonicos	Not reported	Not reported	unknown
Alpine	freeradius	3.18	`3.0.27-r0`	fixed
Alpine	freeradius	3.19	`3.0.27-r0`	fixed
Alpine	freeradius	3.20	`3.0.27-r0`	fixed
Alpine	freeradius	3.21	`3.0.27-r0`	fixed
Alpine	freeradius	3.22	`3.0.27-r0`	fixed
Alpine	freeradius	3.23	`3.0.27-r0`	fixed
Alpine	freeradius	3.24	`3.0.27-r0`	fixed
Ubuntu	krb5	pro	`1.15.1-2`	vulnerable
Ubuntu	krb5	pro	`1.16-2`	vulnerable
Ubuntu	krb5	pro	`1.16-2build1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.1+esm1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.2`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.3`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4+esm1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4+esm2`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4+esm3`	fixed
Ubuntu	krb5	20.04	`1.17-6`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu3`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.1`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.2`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.3`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.4`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.6`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.7`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.8`	fixed
Ubuntu	krb5	22.04	`1.18.3-6`	vulnerable
Ubuntu	krb5	22.04	`1.18.3-7`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-0ubuntu1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.2`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.3`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.4`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.5`	fixed
Ubuntu	krb5	24.04	`1.20.1-3ubuntu1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-5build1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2.1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2.2`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	krb5	pro	`1.15.1-2`	vulnerable
Ubuntu	krb5	pro	`1.16-2`	vulnerable
Ubuntu	krb5	pro	`1.16-2build1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.1+esm1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.2`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.3`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4+esm1`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4+esm2`	vulnerable
Ubuntu	krb5	pro	`1.16-2ubuntu0.4+esm3`	fixed
Ubuntu	libpam-radius-auth	pro	`1.3.17-0ubuntu4`	vulnerable
Ubuntu	libpam-radius-auth	pro	`1.3.17-0ubuntu4+esm1`	vulnerable
Ubuntu	freeradius	pro	`2.1.12+dfsg-1.3ubuntu5`	vulnerable
Ubuntu	freeradius	pro	`2.2.8+dfsg-0.1`	vulnerable
Ubuntu	freeradius	pro	`2.2.8+dfsg-0.1build1`	vulnerable
Ubuntu	freeradius	pro	`2.2.8+dfsg-0.1build2`	vulnerable
Ubuntu	freeradius	pro	`2.2.8+dfsg-0.1ubuntu0.1`	vulnerable
Ubuntu	freeradius	pro	`2.2.8+dfsg-0.1ubuntu0.1+esm1`	vulnerable
Ubuntu	libpam-radius-auth	16.04	`1.3.17-0ubuntu4`	vulnerable
Ubuntu	libpam-radius-auth	16.04	`1.3.17-0ubuntu4.1`	vulnerable
Ubuntu	freeradius	18.04	`3.0.15+dfsg-1ubuntu2`	vulnerable
Ubuntu	freeradius	18.04	`3.0.16+dfsg-1ubuntu2`	vulnerable
Ubuntu	freeradius	18.04	`3.0.16+dfsg-1ubuntu3`	vulnerable
Ubuntu	freeradius	18.04	`3.0.16+dfsg-1ubuntu3.1`	vulnerable
Ubuntu	freeradius	18.04	`3.0.16+dfsg-1ubuntu3.2`	vulnerable
Ubuntu	libpam-radius-auth	18.04	`1.3.17-0ubuntu5`	vulnerable
Ubuntu	libpam-radius-auth	18.04	`1.3.17-0ubuntu5.18.04.1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.19+dfsg-3`	vulnerable
Ubuntu	freeradius	20.04	`3.0.19+dfsg-3build1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3build1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3ubuntu0.1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3ubuntu0.2`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3ubuntu0.4`	fixed
Ubuntu	krb5	20.04	`1.17-6`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu3`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.1`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.2`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.3`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.4`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.6`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.7`	vulnerable
Ubuntu	krb5	20.04	`1.17-6ubuntu4.8`	fixed
Ubuntu	libpam-radius-auth	20.04	`1.3.17-0ubuntu5`	vulnerable
Ubuntu	libpam-radius-auth	20.04	`1.4.0-2`	vulnerable
Ubuntu	libpam-radius-auth	20.04	`1.4.0-2ubuntu1`	vulnerable
Ubuntu	libpam-radius-auth	20.04	`1.4.0-3`	vulnerable
Ubuntu	freeradius	22.04	`3.0.21+dfsg-2.2`	vulnerable
Ubuntu	freeradius	22.04	`3.0.21+dfsg-3`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu2`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.2`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3`	fixed
Ubuntu	krb5	22.04	`1.18.3-6`	vulnerable
Ubuntu	krb5	22.04	`1.18.3-7`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-0ubuntu1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.1`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.2`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.3`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.4`	vulnerable
Ubuntu	krb5	22.04	`1.19.2-2ubuntu0.5`	fixed
Ubuntu	libpam-radius-auth	22.04	`2.0.0-1`	vulnerable
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2`	vulnerable
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2build2`	vulnerable
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2build6`	vulnerable
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2build7`	vulnerable
Ubuntu	freeradius	24.04	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Ubuntu	krb5	24.04	`1.20.1-3ubuntu1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-5build1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2.1`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2.2`	vulnerable
Ubuntu	krb5	24.04	`1.20.1-6ubuntu2.3`	fixed
Ubuntu	libpam-radius-auth	24.04	`2.0.0-1`	vulnerable
Ubuntu	libpam-radius-auth	24.04	`2.0.1-1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.19+dfsg-3`	vulnerable
Ubuntu	freeradius	20.04	`3.0.19+dfsg-3build1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3build1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3ubuntu0.1`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3ubuntu0.2`	vulnerable
Ubuntu	freeradius	20.04	`3.0.20+dfsg-3ubuntu0.4`	fixed
Ubuntu	freeradius	22.04	`3.0.21+dfsg-2.2`	vulnerable
Ubuntu	freeradius	22.04	`3.0.21+dfsg-3`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu2`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.2`	vulnerable
Ubuntu	freeradius	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3`	fixed
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2`	vulnerable
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2build2`	vulnerable
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2build6`	vulnerable
Ubuntu	freeradius	24.04	`3.2.3+dfsg-2build7`	vulnerable
Ubuntu	freeradius	24.04	`3.2.5+dfsg-3~ubuntu24.04.1`	fixed
Opensuse	radcli	tumbleweed	`1.5.0-1.1`	fixed
Suse	freeradius-server	linux enterprise high performance computing 15 sp2-ltss	`3.0.21-150200.3.15.1`	fixed
Suse	freeradius-server	linux enterprise high performance computing 15 sp3-ltss	`3.0.21-150200.3.15.1`	fixed
Suse	freeradius-server	linux enterprise server 15 sp2-ltss	`3.0.21-150200.3.15.1`	fixed
Suse	freeradius-server	linux enterprise server 15 sp3-ltss	`3.0.21-150200.3.15.1`	fixed
Suse	freeradius-server	linux enterprise server for sap applications 15 sp2	`3.0.21-150200.3.15.1`	fixed
Suse	freeradius-server	linux enterprise server for sap applications 15 sp3	`3.0.21-150200.3.15.1`	fixed
Suse	freeradius-server	enterprise storage 7.1	`3.0.21-150200.3.15.1`	fixed
Suse	freeradius-server	linux enterprise module for server applications 15 sp6	`3.2.4-150600.3.3.2`	fixed
Opensuse	freeradius-server	leap 15.6	`3.2.4-150600.3.3.2`	fixed
Suse	freeradius-server	linux enterprise software development kit 12 sp5	`3.0.19-3.15.1`	fixed
Suse	freeradius-server	linux enterprise server 12 sp5	`3.0.19-3.15.1`	fixed
Suse	freeradius-server	linux enterprise server for sap applications 12 sp5	`3.0.19-3.15.1`	fixed
Suse	freeradius-server	linux enterprise module for server applications 15 sp5	`3.0.25-150400.4.7.1`	fixed
Suse	freeradius-server	linux enterprise high performance computing 15 sp4-espos	`3.0.25-150400.4.7.1`	fixed
Suse	freeradius-server	linux enterprise high performance computing 15 sp4-ltss	`3.0.25-150400.4.7.1`	fixed
Suse	freeradius-server	linux enterprise server 15 sp4-ltss	`3.0.25-150400.4.7.1`	fixed
Suse	freeradius-server	linux enterprise server for sap applications 15 sp4	`3.0.25-150400.4.7.1`	fixed
Suse	freeradius-server	manager proxy 4.3	`3.0.25-150400.4.7.1`	fixed
Suse	freeradius-server	manager server 4.3	`3.0.25-150400.4.7.1`	fixed
Opensuse	freeradius-server	leap 15.5	`3.0.25-150400.4.7.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	freeradius	source	sid	`3.2.5+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	freeradius	source	forky	`3.2.5+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	freeradius	source	trixie	`3.2.5+dfsg-1`	not yet assigned	Not reported	Not reported
Debian	freeradius	source	bookworm	`(unfixed)`	not yet assigned	Not reported	Not reported
Ubuntu	krb5	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-admin-server	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-doc	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-gss-samples	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-k5tls	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-kdc	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-kdc-ldap	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-kpropd	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-locales	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-multidev	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-otp	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-pkinit	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	krb5-user	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libgssapi-krb5-2	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libgssrpc4t64	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libk5crypto3	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkadm5clnt-mit12	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkadm5srv-mit12	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkdb5-10t64	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkrad-dev	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkrad0	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkrb5-3	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkrb5-dev	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	libkrb5support0	deb	noble	`1.20.1-6ubuntu2.3`	Not reported	Not reported	Not reported
Ubuntu	freeradius	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-common	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-config	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-dhcp	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-iodbc	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-krb5	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-ldap	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-memcached	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-mysql	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-postgresql	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-python3	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-redis	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-rest	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-utils	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	freeradius-yubikey	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libfreeradius-dev	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Ubuntu	libfreeradius3	deb	noble	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	Not reported	Not reported
Cpe	freeradius	cpe	Not reported	`3.0.27`	Not reported	NVD-CVE-2024-3596	Not reported
Alpine	freeradius	apk	3.18	`3.0.27-r0`	Not reported	ALPINE-CVE-2024-3596	Not reported
Alpine	freeradius	apk	3.19	`3.0.27-r0`	Not reported	ALPINE-CVE-2024-3596	Not reported
Alpine	freeradius	apk	3.20	`3.0.27-r0`	Not reported	ALPINE-CVE-2024-3596	Not reported
Alpine	freeradius	apk	3.21	`3.0.27-r0`	Not reported	ALPINE-CVE-2024-3596	Not reported
Alpine	freeradius	apk	3.22	`3.0.27-r0`	Not reported	ALPINE-CVE-2024-3596	Not reported
Alpine	freeradius	apk	3.23	`3.0.27-r0`	Not reported	ALPINE-CVE-2024-3596	Not reported
Alpine	freeradius	apk	3.24	`3.0.27-r0`	Not reported	ALPINE-CVE-2024-3596	Not reported
Ubuntu	krb5	deb	pro	`1.16-2ubuntu0.4+esm3`	Not reported	USN-7257-1	Not reported
Ubuntu	krb5	deb	20.04	`1.17-6ubuntu4.8`	Not reported	USN-7257-1	Not reported
Ubuntu	krb5	deb	22.04	`1.19.2-2ubuntu0.5`	Not reported	USN-7257-1	Not reported
Ubuntu	krb5	deb	24.04	`1.20.1-6ubuntu2.3`	Not reported	USN-7257-1	Not reported
Ubuntu	krb5	deb	pro	`1.16-2ubuntu0.4+esm3`	Not reported	UBUNTU-CVE-2024-3596	Not reported
Ubuntu	freeradius	deb	20.04	`3.0.20+dfsg-3ubuntu0.4`	Not reported	UBUNTU-CVE-2024-3596	Not reported
Ubuntu	krb5	deb	20.04	`1.17-6ubuntu4.8`	Not reported	UBUNTU-CVE-2024-3596	Not reported
Ubuntu	freeradius	deb	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3`	Not reported	UBUNTU-CVE-2024-3596	Not reported
Ubuntu	krb5	deb	22.04	`1.19.2-2ubuntu0.5`	Not reported	UBUNTU-CVE-2024-3596	Not reported
Ubuntu	freeradius	deb	24.04	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	UBUNTU-CVE-2024-3596	Not reported
Ubuntu	krb5	deb	24.04	`1.20.1-6ubuntu2.3`	Not reported	UBUNTU-CVE-2024-3596	Not reported
Ubuntu	freeradius	deb	20.04	`3.0.20+dfsg-3ubuntu0.4`	Not reported	USN-7055-1	Not reported
Ubuntu	freeradius	deb	22.04	`3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3`	Not reported	USN-7055-1	Not reported
Ubuntu	freeradius	deb	24.04	`3.2.5+dfsg-3~ubuntu24.04.1`	Not reported	USN-7055-1	Not reported
Opensuse	radcli	rpm	tumbleweed	`1.5.0-1.1`	Not reported	OPENSUSE-SU-2026:10528-1	Not reported
Suse	freeradius-server	rpm	linux enterprise high performance computing 15 sp2-ltss	`3.0.21-150200.3.15.1`	Not reported	SUSE-SU-2024:2367-1	Not reported
Suse	freeradius-server	rpm	linux enterprise high performance computing 15 sp3-ltss	`3.0.21-150200.3.15.1`	Not reported	SUSE-SU-2024:2367-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server 15 sp2-ltss	`3.0.21-150200.3.15.1`	Not reported	SUSE-SU-2024:2367-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server 15 sp3-ltss	`3.0.21-150200.3.15.1`	Not reported	SUSE-SU-2024:2367-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server for sap applications 15 sp2	`3.0.21-150200.3.15.1`	Not reported	SUSE-SU-2024:2367-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server for sap applications 15 sp3	`3.0.21-150200.3.15.1`	Not reported	SUSE-SU-2024:2367-1	Not reported
Suse	freeradius-server	rpm	enterprise storage 7.1	`3.0.21-150200.3.15.1`	Not reported	SUSE-SU-2024:2367-1	Not reported
Suse	freeradius-server	rpm	linux enterprise module for server applications 15 sp6	`3.2.4-150600.3.3.2`	Not reported	SUSE-SU-2024:2359-1	Not reported
Opensuse	freeradius-server	rpm	leap 15.6	`3.2.4-150600.3.3.2`	Not reported	SUSE-SU-2024:2359-1	Not reported
Suse	freeradius-server	rpm	linux enterprise software development kit 12 sp5	`3.0.19-3.15.1`	Not reported	SUSE-SU-2024:2361-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server 12 sp5	`3.0.19-3.15.1`	Not reported	SUSE-SU-2024:2361-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server for sap applications 12 sp5	`3.0.19-3.15.1`	Not reported	SUSE-SU-2024:2361-1	Not reported
Suse	freeradius-server	rpm	linux enterprise module for server applications 15 sp5	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported
Suse	freeradius-server	rpm	linux enterprise high performance computing 15 sp4-espos	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported
Suse	freeradius-server	rpm	linux enterprise high performance computing 15 sp4-ltss	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server 15 sp4-ltss	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported
Suse	freeradius-server	rpm	linux enterprise server for sap applications 15 sp4	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported
Suse	freeradius-server	rpm	manager proxy 4.3	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported
Suse	freeradius-server	rpm	manager server 4.3	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported
Opensuse	freeradius-server	rpm	leap 15.5	`3.0.25-150400.4.7.1`	Not reported	SUSE-SU-2024:2366-1	Not reported

Notes

[bookworm] freeradius: Minor issue; can be fixed via point release rebasing to 3.2.5, cf. #1076022

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[freeradius]Unknown
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-common]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · all · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · all · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · all · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · all · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-config]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-dhcp]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-iodbc]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-krb5]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-ldap]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-memcached]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-mysql]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-postgresql]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-python3]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-redis]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-rest]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-utils]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[freeradius-yubikey]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[libfreeradius3]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
[libfreeradius-dev]Unknown
Source package: [freeradius]
Details (4)
- 3.2.1+dfsg-4+deb12u1 · amd64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.1+dfsg-4+deb12u1 · arm64 · bookworm
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · amd64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm
- 3.2.7+dfsg-1~bpo12+1 · arm64 · bookworm-backports
  Affected
  usn · freeradius · debian · bookworm

[openSUSE Tumbleweed]

[libradcli10]Unknown
Source package: [radcli]
Details (1)
- 1.5.2-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.5.0-1.1
  Version impact unknown
  usn · radcli · opensuse · tumbleweed
[radcli]Unknown
Source package: [radcli]
Details (1)
- 1.5.2-1.3 · x86_64 · tumbleweed
  Fixed · Fixed: 1.5.0-1.1
  usn · radcli · opensuse · tumbleweed
[radcli-compat-devel]Unknown
Source package: [radcli]
Details (1)
- 1.5.2-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 1.5.0-1.1
  Version impact unknown
  usn · radcli · opensuse · tumbleweed

Next results

Observed: Oct 27, 2026, 3:14:29 AM UTC

References

[CERT-Bund public advisories] · [CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]