FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.
CVSS Details
- CVSS 3.0 Base Score: 7.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade freeradius | Jun 5, 2017 | Jun 22, 2015 |
| Freebsd | — | Upgrade freeradius2Upgrade freeradius3 | Dec 10, 2025 | Jul 13, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 22, 2015 |
| Suse | — | Upgrade freeradius-server-postgresqlUpgrade freeradius-server-docUpgrade freeradius-server-python3Upgrade freeradius-server-ldapUpgrade freeradius-server-perlUpgrade freeradius-server-krb5Upgrade freeradius-serverUpgrade freeradius-server-pythonUpgrade freeradius-server-dialupadminUpgrade freeradius-server-develUpgrade freeradius-server-utilsUpgrade freeradius-server-sqliteUpgrade freeradius-server-mysqlUpgrade freeradius-server-libs | Jan 11, 2017 | Jun 22, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub