https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:34:17 +0000 https://vulnerability.circl.lu/vuln/cve-2014-3616 <p>nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct &#34;virtual host confusion&#34; attacks.</p> <p>nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct &#34;virtual host confusion&#34; attacks.</p> https://vulnerability.circl.lu/vuln/cve-2014-3616 https://vulnerability.circl.lu/vuln/usn-2351-1 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nginx</p> <p>Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that nginx incorrectly reused cached SSL sessions. An attacker could possibly use this issue in certain configurations to obtain access to information from a different virtual host.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nginx</p> <p>Antoine Delignat-Lavaud and Karthikeyan Bhargavan discovered that nginx incorrectly reused cached SSL sessions. An attacker could possibly use this issue in certain configurations to obtain access to information from a different virtual host.</p> https://vulnerability.circl.lu/vuln/usn-2351-1