BlastRADIUS

Started by sirdvd, July 09, 2024, 05:12:12 PM

Previous topic - Next topic
I'm wondering if the FreeRADIUS plugin is vulnerable to CVE-2024-3596?

I'm reading through the faq [https://www.inkbridgenetworks.com/blastradius/faq] but I'm not an expert.

https://lists.freeradius.org/pipermail/freeradius-users/2024-July/104505.html

Quote
This vulnerability affects ALL RADIUS clients and ALL RADIUS servers

It's a Radius spec issue, so yes: "ALL RADIUS servers"