Quick Patch for CVE-2024-3596 to include Message-Authenticator in all…

[pendula95]

Patch for CVE-2024-3596 to send all responses with Message-Authenticator Attribute. This patch only handles adding attribute in responses. For full fix we need to also validate Message-Authenticator Attribute when decoding packages.

[mdbsaleem]

@pendula95 I tried the patch fix. It seems a line of code is missing to be added without which the message authenticator attribute is 0's. When I add the call as below it returns the Message-Authenticator correctly.

attributes = getAttributeBytes();
DataOutputStream dos = new DataOutputStream(out);
dos.writeByte(getPacketType());
dos.writeByte(getPacketIdentifier());
dos.writeShort(packetLength);
dos.write(getAuthenticator());

[kaustubhDsarathi]

@mdbsaleem but it's already set at this line.