CVE-2015-4680
Fixed in a distro release EPSS 2%
FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
Products: freeradius, suse linux_enterprise_server, suse linux_enterprise_software_development_kit
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | freeradius | 2.2.8+dfsg-0.1 |
| Debian 13 | freeradius | 2.2.8+dfsg-0.1 |
| Debian 14 | freeradius | 2.2.8+dfsg-0.1 |
| Debian 7 | freeradius | 2.1.12+dfsg-1.2+deb7u1 |
| SUSE Linux Enterprise Server 11 SP4 | freeradius-server | 2.1.1-7.24.1 |
| SUSE Linux Enterprise Server 12 SP1 | freeradius-server | 3.0.3-14.1 |
| SUSE Linux Enterprise Server 12 SP2 | freeradius-server | 3.0.3-14.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | freeradius-server | 3.0.3-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | freeradius-server | 2.1.1-7.24.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | freeradius-server | 3.0.3-14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | freeradius-server | 3.0.3-14.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | freeradius-server | 2.1.1-7.24.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP1 | freeradius-server | 3.0.3-14.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | freeradius-server | 3.0.3-14.1 |
| openSUSE Tumbleweed | freeradius-server | 3.0.23-1.5 |