{"id":"USN-7055-1","summary":"freeradius vulnerability","details":"Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc\nStevens, and Adam Suhl discovered that FreeRADIUS incorrectly authenticated\ncertain responses. An attacker able to intercept communications between a\nRADIUS client and server could possibly use this issue to forge responses,\nbypass authentication, and access network devices and services.\n\nThis update introduces new configuration options called \"limit_proxy_state\"\nand \"require_message_authenticator\" that default to \"auto\" but should be\nset to \"yes\" once all RADIUS devices have been upgraded on a network.\n","modified":"2026-04-27T17:31:03.150841Z","published":"2024-10-03T14:24:55Z","related":["UBUNTU-CVE-2024-3596"],"upstream":["CVE-2024-3596","UBUNTU-CVE-2024-3596"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7055-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-3596"}],"affected":[{"package":{"name":"freeradius","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/freeradius@3.0.20+dfsg-3ubuntu0.4?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.20+dfsg-3ubuntu0.4"}]}],"versions":["3.0.19+dfsg-3","3.0.19+dfsg-3build1","3.0.20+dfsg-1","3.0.20+dfsg-3","3.0.20+dfsg-3build1","3.0.20+dfsg-3ubuntu0.1","3.0.20+dfsg-3ubuntu0.2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"freeradius","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-common","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-config","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-dhcp","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-iodbc","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-krb5","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-ldap","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-memcached","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-mysql","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-postgresql","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-python3","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-redis","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-rest","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-utils","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"freeradius-yubikey","binary_version":"3.0.20+dfsg-3ubuntu0.4"},{"binary_name":"libfreeradius3","binary_version":"3.0.20+dfsg-3ubuntu0.4"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-3596","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:20.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7055-1.json"}},{"package":{"name":"freeradius","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/freeradius@3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"}]}],"versions":["3.0.21+dfsg-2.2","3.0.21+dfsg-3","3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu2","3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3","3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.1","3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"freeradius","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-common","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3","binary_name":"freeradius-config"},{"binary_name":"freeradius-dhcp","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-iodbc","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-krb5","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-ldap","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-memcached","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-mysql","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-postgresql","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-python3","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3","binary_name":"freeradius-redis"},{"binary_name":"freeradius-rest","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-utils","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"freeradius-yubikey","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"},{"binary_name":"libfreeradius3","binary_version":"3.0.26~dfsg~git20220223.1.00ed0241fa-0ubuntu3.3"}]},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:22.04:LTS","cves":[{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2024-3596"}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7055-1.json"}},{"package":{"name":"freeradius","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/freeradius@3.2.5+dfsg-3~ubuntu24.04.1?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.5+dfsg-3~ubuntu24.04.1"}]}],"versions":["3.2.3+dfsg-2","3.2.3+dfsg-2build2","3.2.3+dfsg-2build6","3.2.3+dfsg-2build7"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"freeradius","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-common","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_version":"3.2.5+dfsg-3~ubuntu24.04.1","binary_name":"freeradius-config"},{"binary_name":"freeradius-dhcp","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-iodbc","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_version":"3.2.5+dfsg-3~ubuntu24.04.1","binary_name":"freeradius-krb5"},{"binary_name":"freeradius-ldap","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-memcached","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-mysql","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-postgresql","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-python3","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-redis","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_version":"3.2.5+dfsg-3~ubuntu24.04.1","binary_name":"freeradius-rest"},{"binary_name":"freeradius-utils","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"freeradius-yubikey","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"},{"binary_name":"libfreeradius3","binary_version":"3.2.5+dfsg-3~ubuntu24.04.1"}]},"database_specific":{"cves_map":{"cves":[{"id":"CVE-2024-3596","severity":[{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}],"ecosystem":"Ubuntu:24.04:LTS"},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7055-1.json"}}],"schema_version":"1.7.5"}