Stay Secure with the Latest Linux Advisories

security advisoryauthenticationkrb5

Mageia 9: MGASA-2024-0385 critical: krb5 forgery attack

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. (CVE-2024-3596) . MGASA-2024-0385 - Updated krb5 packages fix security vulnerability Publication date: 02 Dec 2024 URL: https://advisories.mageia.org/MGASA-2024-0385.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-3596 RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. (CVE-2024-3596) References: - https://bugs.mageia.org/show_bug.cgi?id=33769 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/REJM7FX5TXBAJNRQ7XSMGPQSLMSSGMA3/ - https://www.cve.org/CVERecord?id=CVE-2024-3596 SRPMS: - 9/core/krb5-1.20.1-1.3.mga9 . Krb5 software revisions address spoofing attack flaw in Mageia. Crucial for users to apply updates without delay.. RADIUS Protocol,Mageia Security,krb5 Updates,forgery protection. . Severity: Critical. LinuxSecurity.com Team

Dec 02, 2024 •Critical Mageia