Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2015-3455

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a valid certificate.

  • Published: May 18, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-3455
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 2.6
  • AV:N/AC:H/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
oracle / solaris 11.2 11.2.x
oracle / linux 7 7.x
squid-cache / squid 3.2.0.18 3.2.0.18.x
squid-cache / squid 3.3.3 3.3.3.x
squid-cache / squid 3.5.2 3.5.2.x
squid-cache / squid 3.2.0.9 3.2.0.9.x
squid-cache / squid 3.3.11 3.3.11.x
squid-cache / squid 3.3.0.1 3.3.0.1.x
squid-cache / squid 3.3.5 3.3.5.x
squid-cache / squid 3.2.0.1 3.2.0.1.x
squid-cache / squid 3.3.0.3 3.3.0.3.x
squid-cache / squid 3.3.13 3.3.13.x
squid-cache / squid 3.2.2 3.2.2.x
squid-cache / squid 3.2.4 3.2.4.x
squid-cache / squid 3.2.0.6 3.2.0.6.x
squid-cache / squid 3.2.0.15 3.2.0.15.x
squid-cache / squid 3.4.2 3.4.2.x
squid-cache / squid 3.2.10 3.2.10.x
squid-cache / squid 3.2.13 3.2.13.x
squid-cache / squid 3.4.10 3.4.10.x
squid-cache / squid 3.5.0.2 3.5.0.2.x
squid-cache / squid 3.5.0.1 3.5.0.1.x
squid-cache / squid 3.4.3 3.4.3.x
squid-cache / squid 3.3.7 3.3.7.x
squid-cache / squid 3.4.5 3.4.5.x
squid-cache / squid 3.3.2 3.3.2.x
squid-cache / squid 3.2.0.19 3.2.0.19.x
squid-cache / squid 3.2.0.13 3.2.0.13.x
squid-cache / squid 3.2.0.16 3.2.0.16.x
squid-cache / squid 3.3.1 3.3.1.x
squid-cache / squid 3.2.5 3.2.5.x
squid-cache / squid 3.4.0.1 3.4.0.1.x
squid-cache / squid 3.3.0 3.3.0.x
squid-cache / squid 3.4.7 3.4.7.x
squid-cache / squid 3.3.0.2 3.3.0.2.x
squid-cache / squid 3.2.12 3.2.12.x
squid-cache / squid 3.5.1 3.5.1.x
squid-cache / squid 3.3.9 3.3.9.x
squid-cache / squid 3.2.0.10 3.2.0.10.x
squid-cache / squid 3.2.0.7 3.2.0.7.x
squid-cache / squid 3.2.0.11 3.2.0.11.x
squid-cache / squid 3.4.8 3.4.8.x
squid-cache / squid 3.3.12 3.3.12.x
squid-cache / squid 3.2.0.3 3.2.0.3.x
squid-cache / squid 3.4.6 3.4.6.x
squid-cache / squid 3.2.11 3.2.11.x
squid-cache / squid 3.3.4 3.3.4.x
squid-cache / squid 3.4.12 3.4.12.x
squid-cache / squid 3.2.9 3.2.9.x
squid-cache / squid 3.2.8 3.2.8.x
squid-cache / squid 3.4.1 3.4.1.x
squid-cache / squid 3.2.6 3.2.6.x
squid-cache / squid 3.4.11 3.4.11.x
squid-cache / squid 3.3.6 3.3.6.x
squid-cache / squid 3.2.0.4 3.2.0.4.x
squid-cache / squid 3.2.3 3.2.3.x
squid-cache / squid 3.2.0.12 3.2.0.12.x
squid-cache / squid 3.5.0.3 3.5.0.3.x
squid-cache / squid 3.5.0.4 3.5.0.4.x
squid-cache / squid 3.4.0.2 3.4.0.2.x
squid-cache / squid 3.4.9 3.4.9.x
squid-cache / squid 3.2.1 3.2.1.x
squid-cache / squid 3.2.0.2 3.2.0.2.x
squid-cache / squid 3.3.8 3.3.8.x
squid-cache / squid 3.2.0.8 3.2.0.8.x
squid-cache / squid 3.2.0.5 3.2.0.5.x
squid-cache / squid 3.3.10 3.3.10.x
squid-cache / squid 3.2.0.14 3.2.0.14.x
squid-cache / squid 3.4.0.3 3.4.0.3.x
squid-cache / squid 3.4.4 3.4.4.x
squid-cache / squid 3.2.0.17 3.2.0.17.x
squid-cache / squid 3.2.7 3.2.7.x
fedoraproject / fedora 22 22.x