CVE-2024-3596

CRITICALEPSS 97th pctl

9.0

CVSS v3

Description

RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature.

CWE-354 CWE-924

How to fix

Remediation Available

freeradiusAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-debuginfoAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-develAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-docAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-krb5Amazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-ldapAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-mysqlAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-perlAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-postgresqlAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-pythonAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-sqliteAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-unixODBCAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradius-utilsAmazon

Fixed in:0:3.0.27-1.amzn2.0.1

freeradiusDebian

Fixed in:3.2.5+dfsg-1CVE-2024-3596

Windows 10Windows

Install:KB5040448Microsoft

Windows 10 Version 1607Windows

Install:KB5040434Microsoft

Windows 10 Version 1809Windows

Install:KB5040430Microsoft

Windows 10 Version 21H2Windows

Install:KB5040427Microsoft

Windows 10 Version 22H2Windows

Install:KB5040427Microsoft

Windows 11 Version 22H2Windows

Install:KB5040442Microsoft

Windows 11 Version 23H2Windows

Install:KB5040442Microsoft

Windows 11 version 21H2Windows

Install:KB5040431Microsoft

Windows Server 2008Windows

Install:KB5040490Microsoft

Install:KB5040499Microsoft

Windows Server 2008 R2Windows

Install:KB5040498Microsoft

Install:KB5040497Microsoft

Windows Server 2012Windows

Install:KB5040485Microsoft

Windows Server 2012 (Server Core installation)Windows

Install:KB5040485Microsoft

Windows Server 2012 R2Windows

Install:KB5040456Microsoft

Windows Server 2012 R2 (Server Core installation)Windows

Install:KB5040456Microsoft

Windows Server 2016Windows

Install:KB5040434Microsoft

Windows Server 2016 (Server Core installation)Windows

Install:KB5040434Microsoft

This vulnerability affects an unusually large number of packages. The highest-confidence fixes are shown above; the full list is longer. Check the referenced advisories for complete coverage.

TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorNetwork

Attack ComplexityHigh

Privileges RequiredNone

User InteractionNone

ScopeChanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Exploit Intelligence

14.86%probability of exploitation in 30 days

97thpercentile

Very high risk: more likely to be exploited than 97% of all known CVEs.

References

Third-Party Advisory4

Mailing List1

openwall.com

Technical Description3

Other references5

Related Vulnerabilities

Other CWE-354 vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2023-48795	Medium	5.9	93%	-	Fix
CVE-2019-1166	Medium	5.9	68%	-	-
CVE-2020-26141	Medium	6.5	3.1%	-	Fix
CVE-2020-25862	High	7.5	2.4%	-	Fix
CVE-2023-38802	High	7.5	1.8%	-	Fix
CVE-2020-8838	Medium	6.4	1.6%	-	-

Common questions

How do I fix CVE-2024-3596?

Published advisories record a fix for 167 affected products. The "How to fix" section on this page lists the fixed version and source advisory for each one, so apply the entry matching what you actually run.

Is CVE-2024-3596 being actively exploited?

Not that we know of. CVE-2024-3596 is not in the CISA Known Exploited Vulnerabilities catalog. Its EPSS score of 14.9% is the estimated probability that it will be exploited in the next 30 days. That is higher than 97% of all scored CVEs.

How severe is CVE-2024-3596?

CVE-2024-3596 has a CVSS v3 base score of 9.0, rated critical. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

What does CVE-2024-3596 affect?

Published advisories record a fix for freeradius (Amazon), freeradius-debuginfo (Amazon), freeradius-devel (Amazon), freeradius-doc (Amazon), and 163 more. Only products with a sourced advisory are listed, so treat this as what we can cite rather than a complete inventory.

Embed a live status badge for CVE-2024-3596

Markdown

[![CVE-2024-3596](https://tridentstack.com/cve/badge/CVE-2024-3596.svg)](https://tridentstack.com/cve/CVE-2024-3596)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-3596"><img src="https://tridentstack.com/cve/badge/CVE-2024-3596.svg" alt="CVE-2024-3596"></a>

Check your Linux, Windows endpoints for this class of vulnerability

TridentStack Control continuously scans Linux, Windows endpoints for known vulnerabilities and deploys the fixes from the same console. 200 endpoints free forever, no credit card.

Patch your fleet free Start freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-06-17.