Vulnerability-Lookup

CVE-2015-4680 (GCVE-0-2015-4680)

Vulnerability from cvelistv5 – Published: 2017-04-05 17:00 – Updated: 2024-08-06 06:18

Summary

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

Severity

7.5 (High)


                        
                          CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

Assigner

mitre mitre root

References

7 references

URL	Tags
http://packetstormsecurity.com/files/132415/FreeR…	x_refsource_MISC
http://www.securityfocus.com/archive/1/535810/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/75327	vdb-entryx_refsource_BID
https://bugzilla.redhat.com/show_bug.cgi?id=1234975	x_refsource_CONFIRM
http://www.ocert.org/advisories/ocert-2015-008.html	x_refsource_MISC
http://www.securitytracker.com/id/1032690	vdb-entryx_refsource_SECTRACK
http://lists.opensuse.org/opensuse-security-annou…	vendor-advisoryx_refsource_SUSE

Date Public

2015-06-22 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:18:12.227Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
          },
          {
            "name": "20150622 [oCERT-2015-008] FreeRADIUS insufficent CRL application",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
          },
          {
            "name": "75327",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
          },
          {
            "name": "1032690",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1032690"
          },
          {
            "name": "SUSE-SU-2017:0102",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-06-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-09T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
        },
        {
          "name": "20150622 [oCERT-2015-008] FreeRADIUS insufficent CRL application",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
        },
        {
          "name": "75327",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
        },
        {
          "name": "1032690",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1032690"
        },
        {
          "name": "SUSE-SU-2017:0102",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4680",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
            },
            {
              "name": "20150622 [oCERT-2015-008] FreeRADIUS insufficent CRL application",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
            },
            {
              "name": "75327",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75327"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
            },
            {
              "name": "http://www.ocert.org/advisories/ocert-2015-008.html",
              "refsource": "MISC",
              "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
            },
            {
              "name": "1032690",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1032690"
            },
            {
              "name": "SUSE-SU-2017:0102",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-4680",
    "datePublished": "2017-04-05T17:00:00.000Z",
    "dateReserved": "2015-06-19T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:18:12.227Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2015-4680",
      "date": "2026-09-15",
      "epss": "0.01791",
      "percentile": "0.77171"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"388D7673-6BA7-4113-86E1-00F9A60C8796\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"7B5B5D50-C251-4569-9D2C-49FB64702646\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A693BD6B-BCFF-461B-B71D-4E6F7A614979\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6E1D867F-7147-4C97-927B-C10404CC2985\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"6BD8346B-8A41-43DF-9AFE-06E3546B6AC9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C30EB50-6BCD-44E4-906A-618ACCF627DC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A8C129A8-59C9-4780-8454-4EB112DF0B40\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"13C228DD-0EB3-4348-8D7A-D17A59E92013\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2400422C-8E52-4946-BE83-AA7167F0F703\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0B421C2D-290B-4439-BED6-4C0AEBAF484B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"09685697-9D74-4ECA-ACB0-DF08A1442DF0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4D536C78-5619-4B01-A838-EB348B6D947E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9C3482E5-E818-40CE-A061-4469F3CAC702\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2595550B-8820-471A-9D23-C40A848B73FE\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"15D7F150-6B47-44B8-82A9-5E03AC83B05D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5600607D-209E-4A7B-AC82-657638232D13\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C236E624-8DE0-46CD-A9F1-951D1CDD9F58\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"2076747F-A98E-4DD9-9B52-BF1732BCAD3D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"F84B2729-7B52-4505-9656-1BD31B980705\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*\", \"matchCriteriaId\": \"F2681D87-58A9-4A56-BE97-B00C5061CA32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*\", \"matchCriteriaId\": \"5A633996-2FD7-467C-BAA6-529E16BD06D1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F150BD9-4B94-42D3-9E14-58665B7FF220\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.\"}, {\"lang\": \"es\", \"value\": \"FreeRADIUS 2.2.x en versiones anteriores a 2.2.8 y 3.0.x en versiones anteriores a 3.0.9 no comprueba adecuadamente la revocaci\\u00f3n de certificados CA intermedios.\"}]",
      "id": "CVE-2015-4680",
      "lastModified": "2024-11-21T02:31:33.000",
      "metrics": "{\"cvssMetricV30\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.0\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\", \"baseScore\": 7.5, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 3.9, \"impactScore\": 3.6}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:N/C:N/I:P/A:N\", \"baseScore\": 5.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"NONE\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 10.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2017-04-05T17:59:00.197",
      "references": "[{\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ocert.org/advisories/ocert-2015-008.html\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/535810/100/0/threaded\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/75327\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032690\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1234975\", \"source\": \"cve@mitre.org\", \"tags\": [\"Issue Tracking\", \"Patch\"]}, {\"url\": \"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.ocert.org/advisories/ocert-2015-008.html\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"http://www.securityfocus.com/archive/1/535810/100/0/threaded\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/75327\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1032690\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=1234975\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-295\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2015-4680\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2017-04-05T17:59:00.197\",\"lastModified\":\"2026-05-13T00:24:29.033\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.\"},{\"lang\":\"es\",\"value\":\"FreeRADIUS 2.2.x en versiones anteriores a 2.2.8 y 3.0.x en versiones anteriores a 3.0.9 no comprueba adecuadamente la revocaci\u00f3n de certificados CA intermedios.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:N\",\"baseScore\":5.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-295\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"388D7673-6BA7-4113-86E1-00F9A60C8796\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7B5B5D50-C251-4569-9D2C-49FB64702646\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A693BD6B-BCFF-461B-B71D-4E6F7A614979\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6E1D867F-7147-4C97-927B-C10404CC2985\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BD8346B-8A41-43DF-9AFE-06E3546B6AC9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C30EB50-6BCD-44E4-906A-618ACCF627DC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8C129A8-59C9-4780-8454-4EB112DF0B40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13C228DD-0EB3-4348-8D7A-D17A59E92013\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2400422C-8E52-4946-BE83-AA7167F0F703\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B421C2D-290B-4439-BED6-4C0AEBAF484B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09685697-9D74-4ECA-ACB0-DF08A1442DF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D536C78-5619-4B01-A838-EB348B6D947E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C3482E5-E818-40CE-A061-4469F3CAC702\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2595550B-8820-471A-9D23-C40A848B73FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15D7F150-6B47-44B8-82A9-5E03AC83B05D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5600607D-209E-4A7B-AC82-657638232D13\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C236E624-8DE0-46CD-A9F1-951D1CDD9F58\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"2076747F-A98E-4DD9-9B52-BF1732BCAD3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"F84B2729-7B52-4505-9656-1BD31B980705\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*\",\"matchCriteriaId\":\"F2681D87-58A9-4A56-BE97-B00C5061CA32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A633996-2FD7-467C-BAA6-529E16BD06D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F150BD9-4B94-42D3-9E14-58665B7FF220\"}]}]}],\"references\":[{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ocert.org/advisories/ocert-2015-008.html\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/535810/100/0/threaded\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/75327\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032690\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1234975\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.ocert.org/advisories/ocert-2015-008.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"http://www.securityfocus.com/archive/1/535810/100/0/threaded\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/75327\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1032690\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1234975\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-05-13T01:48:19+00:00",
      "cve": "CVE-2015-4680",
      "id": "CVE-2015-4680",
      "initial_release_date": "2015-06-22T00:00:00+00:00",
      "product_status:known_affected": "25",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "freeradius: insufficent CRL application",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-4680.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-09T00:47:36Z",
      "cve": "CVE-2015-4680",
      "id": "CVE-2015-4680",
      "initial_release_date": "2023-02-15T05:17:34Z",
      "product_status:known_affected": "24",
      "product_status:known_not_affected": "333",
      "product_status:recommended": "666",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2015-4680",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2015-4680.json",
      "version": "16"
    }
  }
}

CNVD-2015-04300

Vulnerability from cnvd - Published: 2015-07-07

Title

FreeRADIUS证书不正确校验吊销中间CA证书漏洞

Description

FreeRadius是一款开源的基于Radius协议,实现Radius AAA(Authentication,Authorization,Accounting)功能的软件。 FreeRadius未能正确检测中间CA证书，允许拥有中间CA发布的证书的远程用户通过系统的验证。

Severity

中

Patch Name

FreeRADIUS证书不正确校验吊销中间CA证书漏洞的补丁

Patch Description

FreeRadius是一款开源的基于Radius协议,实现Radius AAA(Authentication,Authorization,Accounting)功能的软件。FreeRadius不正确检测中间CA证书，允许拥有中间CA发布的证书的远程用户通过系统的验证。目前，厂商已经发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞： http://freeradius.org/security.html

Reference

http://www.ocert.org/advisories/ocert-2015-008.html

Impacted products

Name
['FreeRADIUS FreeRADIUS <= 2.2.7', 'FreeRADIUS FreeRADIUS <= 3.0.8']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "75327"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-4680"
    }
  },
  "description": "FreeRadius\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u57fa\u4e8eRadius\u534f\u8bae,\u5b9e\u73b0Radius AAA(Authentication,Authorization,Accounting)\u529f\u80fd\u7684\u8f6f\u4ef6\u3002\r\n\r\nFreeRadius\u672a\u80fd\u6b63\u786e\u68c0\u6d4b\u4e2d\u95f4CA\u8bc1\u4e66\uff0c\u5141\u8bb8\u62e5\u6709\u4e2d\u95f4CA\u53d1\u5e03\u7684\u8bc1\u4e66\u7684\u8fdc\u7a0b\u7528\u6237\u901a\u8fc7\u7cfb\u7edf\u7684\u9a8c\u8bc1\u3002",
  "discovererName": "unknown",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttp://freeradius.org/security.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-04300",
  "openTime": "2015-07-07",
  "patchDescription": "FreeRadius\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u57fa\u4e8eRadius\u534f\u8bae,\u5b9e\u73b0Radius AAA(Authentication,Authorization,Accounting)\u529f\u80fd\u7684\u8f6f\u4ef6\u3002FreeRadius\u4e0d\u6b63\u786e\u68c0\u6d4b\u4e2d\u95f4CA\u8bc1\u4e66\uff0c\u5141\u8bb8\u62e5\u6709\u4e2d\u95f4CA\u53d1\u5e03\u7684\u8bc1\u4e66\u7684\u8fdc\u7a0b\u7528\u6237\u901a\u8fc7\u7cfb\u7edf\u7684\u9a8c\u8bc1\u3002\u76ee\u524d\uff0c\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "FreeRADIUS\u8bc1\u4e66\u4e0d\u6b63\u786e\u6821\u9a8c\u540a\u9500\u4e2d\u95f4CA\u8bc1\u4e66\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "FreeRADIUS FreeRADIUS \u003c= 2.2.7",
      "FreeRADIUS FreeRADIUS \u003c= 3.0.8"
    ]
  },
  "referenceLink": "http://www.ocert.org/advisories/ocert-2015-008.html",
  "serverity": "\u4e2d",
  "submitTime": "2015-07-02",
  "title": "FreeRADIUS\u8bc1\u4e66\u4e0d\u6b63\u786e\u6821\u9a8c\u540a\u9500\u4e2d\u95f4CA\u8bc1\u4e66\u6f0f\u6d1e"
}

FKIE_CVE-2015-4680

Vulnerability from fkie_nvd - Published: 2017-04-05 17:59 - Updated: 2026-06-17 00:27

Severity

7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Summary

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

References

URL	Tags
cve@mitre.org	http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html	Third Party Advisory
cve@mitre.org	http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html	Patch, Third Party Advisory, VDB Entry
cve@mitre.org	http://www.ocert.org/advisories/ocert-2015-008.html	Patch, Third Party Advisory
cve@mitre.org	http://www.securityfocus.com/archive/1/535810/100/0/threaded
cve@mitre.org	http://www.securityfocus.com/bid/75327	Third Party Advisory, VDB Entry
cve@mitre.org	http://www.securitytracker.com/id/1032690	Third Party Advisory, VDB Entry
cve@mitre.org	https://bugzilla.redhat.com/show_bug.cgi?id=1234975	Issue Tracking, Patch
af854a3a-2127-422b-91ae-364da2661108	http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html	Patch, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.ocert.org/advisories/ocert-2015-008.html	Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/archive/1/535810/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/75327	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	http://www.securitytracker.com/id/1032690	Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/show_bug.cgi?id=1234975	Issue Tracking, Patch

Impacted products

Vendor	Product	Version
freeradius	freeradius	3.0.0
freeradius	freeradius	3.0.1
freeradius	freeradius	3.0.2
freeradius	freeradius	3.0.3
freeradius	freeradius	3.0.4
freeradius	freeradius	3.0.5
freeradius	freeradius	3.0.6
freeradius	freeradius	3.0.7
freeradius	freeradius	3.0.8
freeradius	freeradius	2.2.0
freeradius	freeradius	2.2.1
freeradius	freeradius	2.2.2
freeradius	freeradius	2.2.3
freeradius	freeradius	2.2.4
freeradius	freeradius	2.2.5
freeradius	freeradius	2.2.6
freeradius	freeradius	2.2.7
suse	linux_enterprise_server	12
suse	linux_enterprise_server	12
suse	linux_enterprise_server	12
suse	linux_enterprise_software_development_kit	12
suse	linux_enterprise_software_development_kit	12

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "388D7673-6BA7-4113-86E1-00F9A60C8796",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B5B5D50-C251-4569-9D2C-49FB64702646",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A693BD6B-BCFF-461B-B71D-4E6F7A614979",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E1D867F-7147-4C97-927B-C10404CC2985",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BD8346B-8A41-43DF-9AFE-06E3546B6AC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "4C30EB50-6BCD-44E4-906A-618ACCF627DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8C129A8-59C9-4780-8454-4EB112DF0B40",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "13C228DD-0EB3-4348-8D7A-D17A59E92013",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "2400422C-8E52-4946-BE83-AA7167F0F703",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B421C2D-290B-4439-BED6-4C0AEBAF484B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "09685697-9D74-4ECA-ACB0-DF08A1442DF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D536C78-5619-4B01-A838-EB348B6D947E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C3482E5-E818-40CE-A061-4469F3CAC702",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "2595550B-8820-471A-9D23-C40A848B73FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "15D7F150-6B47-44B8-82A9-5E03AC83B05D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "5600607D-209E-4A7B-AC82-657638232D13",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "C236E624-8DE0-46CD-A9F1-951D1CDD9F58",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "2076747F-A98E-4DD9-9B52-BF1732BCAD3D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "F84B2729-7B52-4505-9656-1BD31B980705",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*",
              "matchCriteriaId": "F2681D87-58A9-4A56-BE97-B00C5061CA32",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "5A633996-2FD7-467C-BAA6-529E16BD06D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*",
              "matchCriteriaId": "5F150BD9-4B94-42D3-9E14-58665B7FF220",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates."
    },
    {
      "lang": "es",
      "value": "FreeRADIUS 2.2.x en versiones anteriores a 2.2.8 y 3.0.x en versiones anteriores a 3.0.9 no comprueba adecuadamente la revocaci\u00f3n de certificados CA intermedios."
    }
  ],
  "id": "CVE-2015-4680",
  "lastModified": "2026-06-17T00:27:43.163",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-04-05T17:59:00.197",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/75327"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1032690"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Third Party Advisory"
      ],
      "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/75327"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1032690"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-58Q5-M5PM-JWPV

Vulnerability from github – Published: 2022-05-14 02:48 – Updated: 2022-05-14 02:48

Details

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

Severity

7.5 (High)


                  
                    CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-4680"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-295"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2017-04-05T17:59:00Z",
    "severity": "HIGH"
  },
  "details": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.",
  "id": "GHSA-58q5-m5pm-jwpv",
  "modified": "2022-05-14T02:48:27Z",
  "published": "2022-05-14T02:48:27Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-4680"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
    },
    {
      "type": "WEB",
      "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
    },
    {
      "type": "WEB",
      "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
    },
    {
      "type": "WEB",
      "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/75327"
    },
    {
      "type": "WEB",
      "url": "http://www.securitytracker.com/id/1032690"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2015-4680

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

Aliases

CVE-2015-4680

Aliases

CVE-2015-4680

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-4680",
    "description": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.",
    "id": "GSD-2015-4680",
    "references": [
      "https://www.suse.com/security/cve/CVE-2015-4680.html",
      "https://advisories.mageia.org/CVE-2015-4680.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-4680"
      ],
      "details": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.",
      "id": "GSD-2015-4680",
      "modified": "2023-12-13T01:19:59.568312Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-4680",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html",
            "refsource": "MISC",
            "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
          },
          {
            "name": "20150622 [oCERT-2015-008] FreeRADIUS insufficent CRL application",
            "refsource": "BUGTRAQ",
            "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
          },
          {
            "name": "75327",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/75327"
          },
          {
            "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975",
            "refsource": "CONFIRM",
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
          },
          {
            "name": "http://www.ocert.org/advisories/ocert-2015-008.html",
            "refsource": "MISC",
            "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
          },
          {
            "name": "1032690",
            "refsource": "SECTRACK",
            "url": "http://www.securitytracker.com/id/1032690"
          },
          {
            "name": "SUSE-SU-2017:0102",
            "refsource": "SUSE",
            "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:3.0.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:freeradius:freeradius:2.2.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:sp1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_server:12:sp2:*:*:*:*:raspberry_pi:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:sp2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-4680"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-295"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975",
              "refsource": "CONFIRM",
              "tags": [
                "Issue Tracking",
                "Patch"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1234975"
            },
            {
              "name": "1032690",
              "refsource": "SECTRACK",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securitytracker.com/id/1032690"
            },
            {
              "name": "75327",
              "refsource": "BID",
              "tags": [
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://www.securityfocus.com/bid/75327"
            },
            {
              "name": "http://www.ocert.org/advisories/ocert-2015-008.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory"
              ],
              "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
            },
            {
              "name": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Third Party Advisory",
                "VDB Entry"
              ],
              "url": "http://packetstormsecurity.com/files/132415/FreeRADIUS-Insufficient-CRL-Application.html"
            },
            {
              "name": "SUSE-SU-2017:0102",
              "refsource": "SUSE",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "http://lists.opensuse.org/opensuse-security-announce/2017-01/msg00010.html"
            },
            {
              "name": "20150622 [oCERT-2015-008] FreeRADIUS insufficent CRL application",
              "refsource": "BUGTRAQ",
              "tags": [],
              "url": "http://www.securityfocus.com/archive/1/535810/100/0/threaded"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2018-10-09T19:57Z",
      "publishedDate": "2017-04-05T17:59Z"
    }
  }
}

OPENSUSE-SU-2024:10767-1

Vulnerability from csaf_opensuse - Published: 2024-06-15 00:00 - Updated: 2024-06-15 00:00

Summary

freeradius-server-3.0.23-1.5 on GA media

Severity

Moderate

Scope

14 vulnerabilities in this advisory, including CVE-2015-4680.

CVE-2015-4680

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Recommended: 52 products

Open the full advisory

SUSE-SU-2017:0102-1

Vulnerability from csaf_suse - Published: 2017-01-10 14:49 - Updated: 2017-01-10 14:49

Summary

Security update for freeradius-server

Severity

Important

Scope

1 vulnerability in this advisory, including CVE-2015-4680.

CVE-2015-4680

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Recommended: 172 products

Open the full advisory

SUSE-SU-2017:1777-1

Vulnerability from csaf_suse - Published: 2017-07-04 13:54 - Updated: 2017-07-04 13:54

Summary

Security update for freeradius-server

Severity

Moderate

Scope

2 vulnerabilities in this advisory, including CVE-2015-4680.

CVE-2015-4680

7.5 (High)


                
                  CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Recommended: 57 products

Open the full advisory

ubuntu-cve-2015-4680

Vulnerability from osv_ubuntu

Published

2017-04-05 17:59

Modified

2025-07-16 04:50

Summary

Details

FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.

Severity

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2015-4680	REPORT
	http://freeradius.org/security.html	REPORT
	http://www.ocert.org/advisories/ocert-2015-008.html	REPORT
	https://www.cve.org/CVERecord?id=CVE-2015-4680	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "freeradius",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-common",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-dbg",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-iodbc",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-iodbc-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-krb5",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-krb5-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-ldap",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-ldap-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-mysql",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-mysql-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-postgresql",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-postgresql-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-utils",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "freeradius-utils-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "libfreeradius-dev",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "libfreeradius-dev-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "libfreeradius2",
            "binary_version": "2.2.8+dfsg-0.1build2"
          },
          {
            "binary_name": "libfreeradius2-dbgsym",
            "binary_version": "2.2.8+dfsg-0.1build2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "freeradius",
        "purl": "pkg:deb/ubuntu/freeradius@2.2.8+dfsg-0.1build2?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.2.8+dfsg-0.1build2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.1.12+dfsg-1.3ubuntu5",
        "2.2.8+dfsg-0.1",
        "2.2.8+dfsg-0.1build1"
      ]
    }
  ],
  "aliases": [],
  "details": "FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates.",
  "id": "UBUNTU-CVE-2015-4680",
  "modified": "2025-07-16T04:50:51Z",
  "published": "2017-04-05T17:59:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2015-4680"
    },
    {
      "type": "REPORT",
      "url": "http://freeradius.org/security.html"
    },
    {
      "type": "REPORT",
      "url": "http://www.ocert.org/advisories/ocert-2015-008.html"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2015-4680"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2015-4680"
  ],
  "withdrawn": "2025-07-18T16:43:14Z"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2015-4680 (GCVE-0-2015-4680)

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature