https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T05:34:17.188854+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-3616 CVE-2014-3616 2026-10-04T05:34:17.192709+00:00

nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.

 https://vulnerability.circl.lu/vuln/usn-2351-1 USN-2351-1 — nginx vulnerability 2026-10-04T05:34:17.192805+00:00

Affected: Ubuntu:14.04:LTS: nginx

Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that nginx incorrectly reused cached SSL sessions. An attacker could possibly use this issue in certain configurations to obtain access to information from a different virtual host.