Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-3455
2.6
LOWCVSS v2
Published
May 18, 2015
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.
squid-cache/squid
GitHubSquid Web Proxy Cache - Source Code
GitHubSquid Web Proxy Cache - Source Code= 3.2.0.18, = 3.3.3, = 3.5.2, = 3.2.0.9, = 3.3.11, = 3.3.0.1, = 3.3.5, = 3.2.0.1, = 3.3.0.3, = 3.2.0.15, = 3.2.0.16, = 3.2.0.6, = 3.2.13, = 3.2.2, = 3.3.2, = 3.4.5, = 3.5.0.1, = 3.5.0.2, = 3.2.0.19, = 3.2.10, = 3.4.2, = 3.4.10, = 3.2.0.13, = 3.4.3, = 3.2.4, = 3.3.7, = 3.3.13, = 3.2.9, = 3.3.9, = 3.3.0, = 3.4.0.1, = 3.4.6, = 3.2.0.11, = 3.2.0.12, = 3.2.0.2, = 3.2.1, = 3.2.5, = 3.2.6, = 3.3.6, = 3.3.1, = 3.4.1, = 3.4.9, = 3.2.0.3, = 3.2.0.4, = 3.2.11, = 3.2.12, = 3.2.8, = 3.3.4, = 3.3.0.2, = 3.4.11, = 3.4.12, = 3.2.0.10, = 3.2.0.7, = 3.2.0.8, = 3.2.3, = 3.3.8, = 3.3.12, = 3.4.0.2, = 3.4.7, = 3.4.8, = 3.5.0.3, = 3.5.0.4, = 3.5.1, = 3.2.0.5, = 3.3.10, = 3.2.0.14, = 3.2.7, = 3.4.4, = 3.2.0.17, = 3.4.0.3NVD
squid
NPMProvides SQL tagged template strings and a schema definition function.
NPMProvides SQL tagged template strings and a schema definition function.= 3.2.0.18, = 3.3.3, = 3.5.2, = 3.2.0.9, = 3.3.11, = 3.3.0.1, = 3.3.5, = 3.2.0.1, = 3.3.0.3, = 3.2.0.15, = 3.2.0.16, = 3.2.0.6, = 3.2.13, = 3.2.2, = 3.3.2, = 3.4.5, = 3.5.0.1, = 3.5.0.2, = 3.2.0.19, = 3.2.10, = 3.4.2, = 3.4.10, = 3.2.0.13, = 3.4.3, = 3.2.4, = 3.3.7, = 3.3.13, = 3.2.9, = 3.3.9, = 3.3.0, = 3.4.0.1, = 3.4.6, = 3.2.0.11, = 3.2.0.12, = 3.2.0.2, = 3.2.1, = 3.2.5, = 3.2.6, = 3.3.6, = 3.3.1, = 3.4.1, = 3.4.9, = 3.2.0.3, = 3.2.0.4, = 3.2.11, = 3.2.12, = 3.2.8, = 3.3.4, = 3.3.0.2, = 3.4.11, = 3.4.12, = 3.2.0.10, = 3.2.0.7, = 3.2.0.8, = 3.2.3, = 3.3.8, = 3.3.12, = 3.4.0.2, = 3.4.7, = 3.4.8, = 3.5.0.3, = 3.5.0.4, = 3.5.1, = 3.2.0.5, = 3.3.10, = 3.2.0.14, = 3.2.7, = 3.4.4, = 3.2.0.17, = 3.4.0.3
RubyGems