The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-29a74ac2b0 advisory.

    Security:

    * CVE-2024-3596: Fix for BlastRADIUS vulnerability in libkrad (support for Message-Authenticator     attribute)
    * Marvin attack: Removal of the RSA method for PKINIT
    * Fix of miscellaneous mistakes in the code

    Enhancement:

    * Rework of TCP request timeout (disabled by default, global timeout setting added)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Fedora 40 : krb5 (2024-29a74ac2b0)

critical Nessus Plugin ID 211422

Version 1.1