CVE-2015-4680

Опубликовано: 05 апр. 2017

Источник: debian

EPSS Низкий

Описание

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

Пакет	Статус	Версия исправления	Релиз	Тип
freeradius	fixed	2.2.8+dfsg-0.1		package
freeradius	no-dsa		jessie	package
freeradius	no-dsa		squeeze	package

Recommended configuration is to use self-signed CAs for EAP-TLS methods.
See raddb/certs/README
https://github.com/FreeRADIUS/freeradius-server/commit/5e698b407dcac2bc45cf03484bac4398109d25c3 (v2.x.x branch)
http://www.ocert.org/advisories/ocert-2015-008.html

EPSS

Процентиль: 59%

0.0038

Низкий

CVE-2015-4680

CVSS3: 7.5

ubuntu

почти 9 лет назад

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

CVE-2015-4680

redhat

больше 10 лет назад

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

CVE-2015-4680

CVSS3: 7.5

nvd

почти 9 лет назад

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

SUSE-SU-2017:0102-1

suse-cvrf

около 9 лет назад

Security update for freeradius-server

GHSA-58q5-m5pm-jwpv

CVSS3: 7.5

github

больше 3 лет назад

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

EPSS

Процентиль: 59%

0.0038

Низкий