Radius/UDP Considered Harmfulblastradius.fail 13 pointsshaananc2 years ago1 commentSaveHideCopy link On HNComments−royce2yCVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596Nothing on oss-security list yet, but it'll appear here: https://www.openwall.com/lists/oss-security/2024/07/09/Essential reading is this FAQ from DeKok, FreeRADIUS maintainer who revised the RADIUS UDP approach to mitigate: https://www.inkbridgenetworks.com/blastradius/faq
Comments
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3596
Nothing on oss-security list yet, but it'll appear here: https://www.openwall.com/lists/oss-security/2024/07/09/
Essential reading is this FAQ from DeKok, FreeRADIUS maintainer who revised the RADIUS UDP approach to mitigate: https://www.inkbridgenetworks.com/blastradius/faq