Page MenuHomeVyOS Platform
Create Task
Maniphest T9351

Accel-PPP: RADIUS: Add Message-Authenticator attribute support for Access packets (Blast-RADIUS mitigation)
Closed, ResolvedPublic
Actions

Description

As part of Blast-RADIUS mitigation, Access Request packets must include Message Authenticator attribute.
Access Accept/Reject/Challenge packets should include the Message Authenticator attribute as well which must be validated.

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Security vulnerability

Event Timeline

RC created this task.Thu, Sep 24, 4:31 PM
RC changed the task status from Open to In progress.
RC triaged this task as Normal priority.
pasik subscribed.Thu, Sep 24, 5:03 PM
RC added a comment.Tue, Sep 29, 5:07 PM

Accel-ppp-ng : https://github.com/accel-ppp/accel-ppp-ng/pull/39
vyos-1x CLI: https://github.com/vyos/vyos-1x/pull/5442

Viacheslav closed this task as Resolved.Wed, Oct 7, 3:51 PM
Viacheslav moved this task from Need Triage to Completed on the VyOS Rolling board.