RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-common" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-config" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-dhcp" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-dhcp-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-iodbc" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-iodbc-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-krb5" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-krb5-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-ldap" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-ldap-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-memcached" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-memcached-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-mysql" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-mysql-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-postgresql" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-postgresql-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-python3" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-python3-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-redis" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-redis-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-rest" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-rest-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-utils" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-utils-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-yubikey" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "freeradius-yubikey-dbgsym" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "libfreeradius-dev" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "libfreeradius3" }, { "binary_version": "3.0.20+dfsg-3ubuntu0.4", "binary_name": "libfreeradius3-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-common" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-config" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-dhcp" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-dhcp-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-iodbc" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-iodbc-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-krb5" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-krb5-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-ldap" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-ldap-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-memcached" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-memcached-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-mysql" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-mysql-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-postgresql" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-postgresql-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-python3" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-python3-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-redis" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-redis-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-rest" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-rest-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-utils" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-utils-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-yubikey" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "freeradius-yubikey-dbgsym" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "libfreeradius-dev" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "libfreeradius3" }, { "binary_version": "3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3", "binary_name": "libfreeradius3-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-common" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-config" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-dhcp" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-dhcp-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-iodbc" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-iodbc-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-krb5" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-krb5-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-ldap" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-ldap-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-memcached" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-memcached-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-mysql" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-mysql-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-postgresql" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-postgresql-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-python3" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-python3-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-redis" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-redis-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-rest" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-rest-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-utils" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-utils-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-yubikey" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "freeradius-yubikey-dbgsym" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "libfreeradius-dev" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "libfreeradius3" }, { "binary_version": "3.2.5+dfsg-3", "binary_name": "libfreeradius3-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-common" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-config" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-dhcp" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-dhcp-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-iodbc" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-iodbc-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-krb5" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-krb5-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-ldap" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-ldap-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-memcached" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-memcached-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-mysql" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-mysql-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-postgresql" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-postgresql-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-python3" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-python3-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-redis" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-redis-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-rest" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-rest-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-utils" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-utils-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-yubikey" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "freeradius-yubikey-dbgsym" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "libfreeradius-dev" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "libfreeradius3" }, { "binary_version": "3.2.5+dfsg-3~ubuntu24.04.1", "binary_name": "libfreeradius3-dbgsym" } ] }