Lucene search

[email protected]NVD:CVE-2015-3455

HistoryMay 18, 2015 - 3:59 p.m.

CVE-2015-3455

2015-05-1815:59:11

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

7.5

Confidence

High

EPSS

0.017

Percentile

87.7%

JSON

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.

Affected configurations

Nvd

Node

oraclelinuxMatch7

oraclesolarisMatch11.2

Node

squid-cachesquidMatch3.2.0.1

squid-cachesquidMatch3.2.0.2

squid-cachesquidMatch3.2.0.3

squid-cachesquidMatch3.2.0.4

squid-cachesquidMatch3.2.0.5

squid-cachesquidMatch3.2.0.6

squid-cachesquidMatch3.2.0.7

squid-cachesquidMatch3.2.0.8

squid-cachesquidMatch3.2.0.9

squid-cachesquidMatch3.2.0.10

squid-cachesquidMatch3.2.0.11

squid-cachesquidMatch3.2.0.12

squid-cachesquidMatch3.2.0.13

squid-cachesquidMatch3.2.0.14

squid-cachesquidMatch3.2.0.15

squid-cachesquidMatch3.2.0.16

squid-cachesquidMatch3.2.0.17

squid-cachesquidMatch3.2.0.18

squid-cachesquidMatch3.2.0.19

squid-cachesquidMatch3.2.1

squid-cachesquidMatch3.2.2

squid-cachesquidMatch3.2.3

squid-cachesquidMatch3.2.4

squid-cachesquidMatch3.2.5

squid-cachesquidMatch3.2.6

squid-cachesquidMatch3.2.7

squid-cachesquidMatch3.2.8

squid-cachesquidMatch3.2.9

squid-cachesquidMatch3.2.10

squid-cachesquidMatch3.2.11

squid-cachesquidMatch3.2.12

squid-cachesquidMatch3.2.13

squid-cachesquidMatch3.3.0

squid-cachesquidMatch3.3.0.1

squid-cachesquidMatch3.3.0.2

squid-cachesquidMatch3.3.0.3

squid-cachesquidMatch3.3.1

squid-cachesquidMatch3.3.2

squid-cachesquidMatch3.3.3

squid-cachesquidMatch3.3.4

squid-cachesquidMatch3.3.5

squid-cachesquidMatch3.3.6

squid-cachesquidMatch3.3.7

squid-cachesquidMatch3.3.8

squid-cachesquidMatch3.3.9

squid-cachesquidMatch3.3.10

squid-cachesquidMatch3.3.11

squid-cachesquidMatch3.3.12

squid-cachesquidMatch3.3.13

squid-cachesquidMatch3.4.0.1

squid-cachesquidMatch3.4.0.2

squid-cachesquidMatch3.4.0.3

squid-cachesquidMatch3.4.1

squid-cachesquidMatch3.4.2

squid-cachesquidMatch3.4.3

squid-cachesquidMatch3.4.4

squid-cachesquidMatch3.4.5

squid-cachesquidMatch3.4.6

squid-cachesquidMatch3.4.7

squid-cachesquidMatch3.4.8

squid-cachesquidMatch3.4.9

squid-cachesquidMatch3.4.10

squid-cachesquidMatch3.4.11

squid-cachesquidMatch3.4.12

squid-cachesquidMatch3.5.0.1

squid-cachesquidMatch3.5.0.2

squid-cachesquidMatch3.5.0.3

squid-cachesquidMatch3.5.0.4

squid-cachesquidMatch3.5.1

squid-cachesquidMatch3.5.2

Node

fedoraprojectfedoraMatch22

VendorProductVersionCPE
oraclelinux7cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:*
oraclesolaris11.2cpe:2.3:o:oracle:solaris:11.2:*:*:*:*:*:*:*
squid-cachesquid3.2.0.1cpe:2.3:a:squid-cache:squid:3.2.0.1:*:*:*:*:*:*:*
squid-cachesquid3.2.0.2cpe:2.3:a:squid-cache:squid:3.2.0.2:*:*:*:*:*:*:*
squid-cachesquid3.2.0.3cpe:2.3:a:squid-cache:squid:3.2.0.3:*:*:*:*:*:*:*
squid-cachesquid3.2.0.4cpe:2.3:a:squid-cache:squid:3.2.0.4:*:*:*:*:*:*:*
squid-cachesquid3.2.0.5cpe:2.3:a:squid-cache:squid:3.2.0.5:*:*:*:*:*:*:*
squid-cachesquid3.2.0.6cpe:2.3:a:squid-cache:squid:3.2.0.6:*:*:*:*:*:*:*
squid-cachesquid3.2.0.7cpe:2.3:a:squid-cache:squid:3.2.0.7:*:*:*:*:*:*:*
squid-cachesquid3.2.0.8cpe:2.3:a:squid-cache:squid:3.2.0.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	linux	7	cpe:2.3:o:oracle:linux:7:::::::*
oracle	solaris	11.2	cpe:2.3:o:oracle:solaris:11.2:::::::*
squid-cache	squid	3.2.0.1	cpe:2.3:a:squid-cache:squid:3.2.0.1:::::::*
squid-cache	squid	3.2.0.2	cpe:2.3:a:squid-cache:squid:3.2.0.2:::::::*
squid-cache	squid	3.2.0.3	cpe:2.3:a:squid-cache:squid:3.2.0.3:::::::*
squid-cache	squid	3.2.0.4	cpe:2.3:a:squid-cache:squid:3.2.0.4:::::::*
squid-cache	squid	3.2.0.5	cpe:2.3:a:squid-cache:squid:3.2.0.5:::::::*
squid-cache	squid	3.2.0.6	cpe:2.3:a:squid-cache:squid:3.2.0.6:::::::*
squid-cache	squid	3.2.0.7	cpe:2.3:a:squid-cache:squid:3.2.0.7:::::::*
squid-cache	squid	3.2.0.8	cpe:2.3:a:squid-cache:squid:3.2.0.8:::::::*