151 matches found
KB5040448: Windows 10 LTS 1507 Security Update (July 2024)
The remote Windows host is missing security update 5040448. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
RADIUS protocol susceptible to forgery attacks.
Overview A vulnerability in the RADIUS protocol allows an attacker allows an attacker to forge an authentication response in cases where a Message-Authenticator attribute is not required or enforced. This vulnerability results from a cryptographically insecure integrity check when validating...
KB5040434: Windows 10 Version 1607 / Windows Server 2016 Security Update (July 2024)
The remote Windows host is missing security update 5040434. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
KB5040430: Windows 10 version 1809 / Windows Server 2019 Security Update (July 2024)
The remote Windows host is missing security update 5040430. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
KB5040437: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2024)
The remote Windows host is missing security update 5040437. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
KB5040485: Windows Server 2012 Security Update (July 2024)
The remote Windows host is missing security update 5040485. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
KB5040456: Windows Server 2012 R2 Security Update (July 2024)
The remote Windows host is missing security update 5040456. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
KB5040427: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (July 2024)
The remote Windows host is missing security update 5040427. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
PT-2024-4668
Name of the Vulnerable Software and Affected Versions: RADIUS Protocol affected versions not specified FreeRadius affected versions not specified Palo Alto Networks PAN-OS affected versions not specified eduMFA prior version 2.2.0 Description: The RADIUS protocol under RFC 2865 is susceptible to...
CVE-2024-3596: Improper Validation of Integrity Check Value
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature...
KB5040438: Windows 11 version 22H2 / Windows Server version 23H2 Security Update (July 2024)
The remote Windows host is missing security update 5040438. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
HPESBNW04662 rev.7 - RADIUS protocol susceptible to forgery attacks
Potential Security Impact: Local: Authentication Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform See Vulnerability Summary Aruba ClearPass Policy Manager Platform See Vulnerability Summary ArubaOS SD-WAN Gateways See Vulnerability Summary...
KB5040431: Windows 11 version 21H2 Security Update (July 2024)
The remote Windows host is missing security update 5040431. It is, therefore, affected by multiple vulnerabilities - RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response Access-Accept, Access-Reject, or Access-Challenge to any othe...
Security Advisory 0101
Security Advisory 0101 PDF Date: July 9, 2024 Revision | Date | Changes ---|---|--- 1.0 | July 9, 2024 | Initial release 1.1 | Dec 23, 2024 | Update Vulnerability Assessment for EAP and accounting, Update fixed EOS release The CVE-ID tracking this issue: CVE-2024-3596 CVSSv3.1 Base Score: 9.0...
CVE-2023-39930
A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...
Vulnerability fixed in Cisco Identity Services Engine
Cisco has fixed a vulnerability in Identity Services Engine. An unauthenticated malicious person could exploit the vulnerability to cause a denial-of-service. The vulnerability is located in the way RADIUS is processed. Sending specially prepared RADIUS packets can cause the system stop processin...
SUSE CVE-2022-41861
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
[SECURITY] Fedora 36 Update: freeradius-3.0.26-1.fc36
The FreeRADIUS Server Project is a high performance and highly configurable GPL'd free RADIUS server. The server is similar in some respects to Livingston's 2.0 server. While FreeRADIUS started as a variant of the Cistron RADIUS server, they don't share a lot in common any more. It now has many...
Fedora: Security Advisory for freeradius (FEDORA-2022-98832b2cc2)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...