{"id":"CVE-2015-4680","aliases":["DEBIAN-CVE-2015-4680","DLA-977-1","EUVD-2015-4699","GHSA-58q5-m5pm-jwpv","MGASA-2015-0291","SUSE-SU-2017:0102-1","SUSE-SU-2017:1777-1","UBUNTU-CVE-2015-4680","openSUSE-SU-2024:10767-1"],"status":"published","title":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of...","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01791,"percentile":0.78519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-295"],"published":"2015-07-28T21:01:59Z","modified":"2026-09-09T07:00:54Z","fixes":[{"ecosystem":"Debian:12","package":"freeradius","fixed_in":["2.2.8+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"freeradius","fixed_in":["2.2.8+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"freeradius","fixed_in":["2.2.8+dfsg-0.1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"freeradius","fixed_in":["2.2.8-1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"freeradius","fixed_in":["2.2.8-1.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"freeradius-server","fixed_in":["3.0.3-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"freeradius-server","fixed_in":["3.0.3-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"freeradius-server","fixed_in":["3.0.3-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"freeradius-server","fixed_in":["3.0.3-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"freeradius-server","fixed_in":["3.0.3-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"freeradius-server","fixed_in":["3.0.3-14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"freeradius-server","fixed_in":["3.0.3-14.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"freeradius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8+dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"freeradius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8+dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"freeradius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8+dfsg-0.1"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"freeradius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.12+dfsg-1.2+deb7u1"}]}],"versions":["2.1.12+dfsg-1.2"],"bundled":3},{"source":"osv","ecosystem":"Mageia:4","package":"freeradius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8-1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"freeradius","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.8-1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-7.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-7.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.1-7.24.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"freeradius-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.23-1.5"}]}],"bundled":14}],"products":[{"vendor":"freeradius","product":"freeradius"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"}],"references":[{"url":"http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","VDB Entry","advisory","fix"]},{"url":"http://www.securityfocus.com/archive/1/535810/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/75327","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1234975","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix","report"]},{"url":"http://www.ocert.org/advisories/ocert-2015-008.html","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://www.securitytracker.com/id/1032690","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4680"},{"url":"https://github.com/advisories/GHSA-58q5-m5pm-jwpv"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-4680","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0291.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16175","tags":["report"]},{"url":"http://freeradius.org/security.html","tags":["web","report"]},{"url":"http://freeradius.org/press/index.html#2.2.8","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16176","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170102-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1013311","tags":["report"]},{"url":"https://bugzilla.suse.com/911886","tags":["report"]},{"url":"https://bugzilla.suse.com/935573","tags":["report"]},{"url":"https://bugzilla.suse.com/951404","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4680","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171777-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1041445","tags":["report"]},{"url":"https://bugzilla.suse.com/912873","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9148","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-4680","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-4680","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2008-4474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10978","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10983","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10984","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10986","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-10988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11234","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-13456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17185","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-4680","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","status":"published","published":"2017-04-05T17:00:00Z","modified":"2024-08-06T06:18:12.227Z","updated_at":"2026-11-02T14:35:43.322279Z"}],"euvd":[{"id":"EUVD-2015-4699","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","status":"published","published":"2017-04-05T17:00:00Z","modified":"2024-08-06T06:18:12Z","updated_at":"2026-11-03T02:22:03.142599Z"}],"ghsa":[{"id":"GHSA-58q5-m5pm-jwpv","title":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of...","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","status":"published","published":"2022-05-14T02:48:27Z","modified":"2023-02-02T05:06:37Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:52:20.153716Z"}],"nvd":[{"id":"CVE-2015-4680","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","status":"published","published":"2017-04-05T17:59:00.197Z","modified":"2026-06-17T00:27:43.163Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:03:17.368799Z"}],"osv":[{"id":"CVE-2015-4680","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","status":"published","published":"2017-04-05T17:59:00Z","modified":"2026-04-16T06:20:12.579555663Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-4680","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","status":"published","published":"2017-04-05T17:59:00.197Z","modified":"2026-09-09T07:00:54.590935715Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-4680","description":"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.","status":"withdrawn","published":"2017-04-05T17:59:00Z","modified":"2025-07-16T08:11:33.788084Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:10.385269Z"},{"id":"DLA-977-1","title":"freeradius - security update","status":"published","published":"2017-06-05T00:00:00Z","modified":"2026-03-09T02:11:38.404937Z","updated_at":"2026-11-02T15:46:13.584509Z"},{"id":"MGASA-2015-0291","title":"Updated freeradius package fixes security vulnerability","description":"The FreeRADIUS server relies on OpenSSL to perform certificate validation,\nincluding Certificate Revocation List (CRL) checks. The FreeRADIUS usage\nof OpenSSL, in CRL application, limits the checks to leaf certificates,\ntherefore not detecting revocation of intermediate CA certificates. An\nunexpired client certificate, issued by an intermediate CA with a revoked\ncertificate, is therefore accepted by FreeRADIUS (CVE-2015-4680).\n\nThe freeradius package has been updated to version 2.2.8, which fixes this\nissue, as well as the failure to run on Mageia 5 due to an OpenSSL issue.\n","status":"published","published":"2015-07-28T21:01:59Z","modified":"2026-04-16T06:26:14.562083872Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10767-1","title":"freeradius-server-3.0.23-1.5 on GA media","description":"These are all security issues fixed in the freeradius-server-3.0.23-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:14:45.599468Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2017:0102-1","title":"Security update for freeradius-server","description":"\nThis update of freeradius-server fixes several issues.\n\nSecurity issue fixed:\n- CVE-2015-4680: Fixed Insufficent CRL application for intermediate certificates (bsc#935573)\n\nNon security issues fixed:\n- Allows FreeRadius Server to start on SUSE Linux Enterprise Server 12 SP2 systems\n  by relaxing a too strict openssl version check. (bsc#1013311)\n- Fixed radclient error free() invalid pointer (bsc#911886)\n- Fixed failing rebuild of freeradius-server package (bsc#951404)\n  \n  ","status":"published","published":"2017-01-10T14:49:17Z","modified":"2026-02-04T02:19:21.100216Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:1777-1","title":"Security update for freeradius-server","description":"This update for freeradius-server fixes the following issues:\n\n- CVE-2017-9148: Disable OpenSSL's internal session cache to mitigate\n  authentication bypass. (bnc#1041445)\n- CVE-2015-4680: Add a configuration option to allow checking of all\n  intermediate certificates for revocations. (bnc#935573)\n\nThe following non security issue was fixed:\n\n- Cannot create table radpostauth because of deprecated TIMESTAMP(14) syntax. (bsc#912873)\n","status":"published","published":"2017-07-04T13:54:26Z","modified":"2026-02-04T03:26:53.747583Z","updated_at":"2026-11-02T15:53:44.209561Z"}]}}