MGASA-2024-0385
- Source
- https://advisories.mageia.org/MGASA-2024-0385.html
- Import Source
- https://advisories.mageia.org/MGASA-2024-0385.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2024-0385
- Related
- Published
- 2024-12-02T17:17:11Z
- Modified
- 2024-12-02T16:50:24Z
- Summary
- Updated krb5 packages fix security vulnerability
- Details
-
RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. (CVE-2024-3596)
- References
- Credits
-
-
- Mageia - COORDINATOR
-