Skip to content
OpenAdvisories
Unscored CVE-2015-4680 EUVD-2015-4699GHSA-58q5-m5pm-jwpv

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

Published Apr 5, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Package: freeradius Ecosystem: Debian

Description

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 freeradius 2.2.8+dfsg-0.1 —
Debian 13 freeradius 2.2.8+dfsg-0.1 —
Debian 12 freeradius 2.2.8+dfsg-0.1 —
Debian 7 freeradius 2.1.12+dfsg-1.2+deb7u1 DLA-977-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP2 freeradius-server 3.0.3-14.1 SUSE-SU-2017:0102-1
SLES 12 SP1 freeradius-server 3.0.3-14.1 SUSE-SU-2017:0102-1
SLES 11 SP4 freeradius-server 2.1.1-7.24.1 SUSE-SU-2017:1777-1
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP2 freeradius-server 3.0.3-14.1 SUSE-SU-2017:0102-1
SLES for SAP 12 SP1 freeradius-server 3.0.3-14.1 SUSE-SU-2017:0102-1
SLES for SAP 11 SP4 freeradius-server 2.1.1-7.24.1 SUSE-SU-2017:1777-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed freeradius-server 3.0.23-1.5 openSUSE-SU-2024:10767-1

Advisories 4

References