FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-4680