Is CVE-2024-3596 in the CISA KEV catalog?

No. CVE-2024-3596 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-3596?

CVE-2024-3596 has a CVSS v3 base score of 9.0 (CRITICAL).

What is the EPSS score for CVE-2024-3596?

CVE-2024-3596 has an EPSS score of 14.86% (96th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-3596?

Upgrade freeradius on debian 13 to 3.2.5+dfsg-1 or later. Fixes are available for 154 affected products.

CVE & CISA-KEV Catalog

CVE-2024-3596

CRITICALEPSS 96th pctl

9.0

CVSS v3

NVD

Description

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

CWE-354 CWE-924

How to fix

Remediation Available

freeradiusDebian

Fixed in:3.2.5+dfsg-1CVE-2024-3596

Windows 10Windows

Install:KB5040448Microsoft

Windows 10 Version 1607Windows

Install:KB5040434Microsoft

Windows 10 Version 1809Windows

Install:KB5040430Microsoft

Windows 10 Version 21H2Windows

Install:KB5040427Microsoft

Windows 10 Version 22H2Windows

Install:KB5040427Microsoft

Windows 11 Version 22H2Windows

Install:KB5040442Microsoft

Windows 11 Version 23H2Windows

Install:KB5040442Microsoft

Windows 11 version 21H2Windows

Install:KB5040431Microsoft

Windows Server 2008Windows

Install:KB5040499Microsoft

Install:KB5040490Microsoft

Windows Server 2008 R2Windows

Install:KB5040498Microsoft

Install:KB5040497Microsoft

Windows Server 2012Windows

Install:KB5040485Microsoft

Windows Server 2012 (Server Core installation)Windows

Install:KB5040485Microsoft

Windows Server 2012 R2Windows

Install:KB5040456Microsoft

Windows Server 2012 R2 (Server Core installation)Windows

Install:KB5040456Microsoft

Windows Server 2016Windows

Install:KB5040434Microsoft

Windows Server 2016 (Server Core installation)Windows

Install:KB5040434Microsoft

Windows Server 2019Windows

Install:KB5040430Microsoft

Windows Server 2019 (Server Core installation)Windows

Install:KB5040430Microsoft

Windows Server 2022Windows

Install:KB5040437Microsoft

Windows Server 2022 (Server Core installation)Windows

Install:KB5040437Microsoft

Windows Server 2022, 23H2 Edition (Server Core installation)Windows

Install:KB5040438Microsoft

freeradiusRed Hat / RHEL

Fixed in:0:3.0.20-1.el7_9.1RHSA-2024:4911

Fixed in:0:3.0.20-1.el7_9.1.ppc64RHSA-2024:4911

Fixed in:0:3.0.20-1.el7_9.1RHSA-2024:4911

Fixed in:0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1.s390x::freeradius:3.0RHSA-2024:4829

Fixed in:0:3.0.20-12.module+el8.6.0+22086+569c8c49.1.ppc64le::freeradius:3.0RHSA-2024:4826

Fixed in:0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1.x86_64::freeradius:3.0RHSA-2024:4874

Fixed in:0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1.src::freeradius:3.0RHSA-2024:4874

Fixed in:0:3.0.20-15.module+el8.10.0+22065+aa3d48ca.x86_64::freeradius:3.0RHSA-2024:4936

Fixed in:0:3.0.20-15.module+el8.10.0+22065+aa3d48ca.s390x::freeradius:3.0RHSA-2024:4936

Fixed in:0:3.0.20-12.module+el8.6.0+22086+569c8c49.1.src::freeradius:3.0RHSA-2024:4826

Fixed in:0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1.ppc64le::freeradius:3.0RHSA-2024:4829

Fixed in:0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1.src::freeradius:3.0RHSA-2024:4829

Fixed in:0:3.0.20-12.module+el8.6.0+22086+569c8c49.1.aarch64::freeradius:3.0RHSA-2024:4826

Fixed in:0:3.0.20-15.module+el8.10.0+22065+aa3d48ca.aarch64::freeradius:3.0RHSA-2024:4936

Fixed in:0:3.0.20-15.module+el8.10.0+22065+aa3d48ca.ppc64le::freeradius:3.0RHSA-2024:4936

Fixed in:0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1.aarch64::freeradius:3.0RHSA-2024:4829

Fixed in:0:3.0.20-15.module+el8.10.0+22065+aa3d48ca.src::freeradius:3.0RHSA-2024:4936

Fixed in:0:3.0.20-4.module+el8.4.0+22088+2692c5cc.1.ppc64le::freeradius:3.0RHSA-2024:4874

Fixed in:0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.src::freeradius:3.0RHSA-2024:4913

Fixed in:0:3.0.20-1.module+el8.2.0+22148+b45f7ef2.1.x86_64::freeradius:3.0RHSA-2024:4913

Fixed in:0:3.0.20-12.module+el8.6.0+22086+569c8c49.1.s390x::freeradius:3.0RHSA-2024:4826

Fixed in:0:3.0.20-12.module+el8.6.0+22086+569c8c49.1.x86_64::freeradius:3.0RHSA-2024:4826

Fixed in:0:3.0.20-14.module+el8.8.0+22090+a01d0e6a.1.x86_64::freeradius:3.0RHSA-2024:4829

Fixed in:0:3.0.21-40.el9_4RHSA-2024:4935

Fixed in:0:3.0.21-38.el9_2.2RHSA-2024:4828

Fixed in:0:3.0.21-40.el9_4RHSA-2024:4935

Fixed in:0:3.0.21-26.el9_0.1RHSA-2024:4912

Fixed in:0:3.0.21-40.el9_4RHSA-2024:4935

Fixed in:0:3.0.21-38.el9_2.2RHSA-2024:4828

Fixed in:0:3.0.21-40.el9_4RHSA-2024:4935

Fixed in:0:3.0.21-26.el9_0.1RHSA-2024:4912

Fixed in:0:3.0.21-38.el9_2.2RHSA-2024:4828

freeradiusRocky