Published: 05/04/2017 Updated: 09/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

FreeRADIUS 2.2.x prior to 2.2.8 and 3.0.x prior to 3.0.9 does not properly check revocation of intermediate CA certificates.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freeradius freeradius 3.0.6
freeradius freeradius 3.0.7
freeradius freeradius 3.0.0
freeradius freeradius 3.0.1
freeradius freeradius 3.0.8
freeradius freeradius 3.0.4
freeradius freeradius 3.0.5
freeradius freeradius 3.0.2
freeradius freeradius 3.0.3
freeradius freeradius 2.2.5
freeradius freeradius 2.2.6
freeradius freeradius 2.2.7
freeradius freeradius 2.2.0
freeradius freeradius 2.2.3
freeradius freeradius 2.2.4
freeradius freeradius 2.2.1
freeradius freeradius 2.2.2
suse linux enterprise software development kit 12
suse linux enterprise server 12

Debian Bug report logs - #789623 freeradius: CVE-2015-4680: insufficent CRL application for intermediate certificates Package: src:freeradius; Maintainer for src:freeradius is Debian FreeRADIUS Packaging Team <pkg-freeradius-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Da ...

FreeRADIUS 22x before 228 and 30x before 309 does not properly check revocation of intermediate CA certificates ...

CWE-295 https://bugzilla.redhat.com/show_bug.cgi?id=1234975 http://www.securitytracker.com/id/1032690 http://www.securityfocus.com/bid/75327 http://www.ocert.org/advisories/ocert-2015-008.html http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html http://www.securityfocus.com/archive/1/535810/100/0/threaded https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=789623 https://nvd.nist.gov

CVE-2015-4680

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect