Lucene search
PRIOn knowledge basePRION:CVE-2015-1855HistoryNov 29, 2019 - 9:15 p.m.
Design/Logic Flaw
2019-11-2921:15:00
PRIOn knowledge base
www.prio-n.com
8
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 8.0 | |
| debian_linux | eq | 7.0 | |
| debian_linux | eq | 9.0 | |
| puppet_agent | eq | 1.0.0 | |
| puppet_enterprise | ge | 3.0.0 | |
| puppet_enterprise | lt | 3.8.0 | |
| ruby | eq | 2.0.0 p481 | |
| ruby | eq | 2.0.0 p353 | |
| ruby | eq | 2.0.0 p195 | |
| ruby | eq | 2.0.0 p643 |
Related
nessus
nessus
Debian DSA-3245-1 : ruby1.8 - security update
2015-05-05 00:00:00
Debian DSA-3246-1 : ruby1.9.1 - security update
2015-05-05 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-3245-1)
2015-05-01 00:00:00
Debian Security Advisory DSA 3247-1 (ruby2.1 - security update)
2015-05-02 00:00:00
Fedora Update for ruby FEDORA-2015-6238
2015-07-07 00:00:00
debian
debian
[SECURITY] [DLA 224-1] ruby1.8 security update
2015-05-18 21:57:18
[SECURITY] [DSA 3246-1] ruby1.9.1 security update
2015-05-02 11:20:09
[SECURITY] [DSA 3247-1] ruby2.1 security update
2015-05-02 11:20:31
osv
osv
ruby1.8 - security update
2015-05-02 00:00:00
ruby2.1 - security update
2015-05-02 00:00:00
ruby1.9.1 - security update
2015-05-02 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: ruby-2.1.6-27.fc21
2015-04-28 13:11:23
[SECURITY] Fedora 22 Update: ruby-2.2.2-11.fc22
2015-04-23 16:09:56
ubuntucve
ubuntucve
CVE-2015-1855
2015-04-09 00:00:00
cve
cve
CVE-2015-1855
2019-11-29 21:15:10
securityvulns
securityvulns
Ruby SSL checks bypass
2015-05-04 00:00:00
[ MDVSA-2015:224 ] ruby
2015-05-04 00:00:00
APPLE-SA-2015-09-30-3 OS X El Capitan 10.11
2015-10-05 00:00:00
freebsd
freebsd
Ruby -- OpenSSL Hostname Verification Vulnerability
2015-04-13 00:00:00
mageia
mageia
Updated ruby packages fix CVE-2015-1855
2015-05-03 03:19:16
alpinelinux
alpinelinux
CVE-2015-1855
2019-11-29 21:15:10
nvd
nvd
CVE-2015-1855
2019-11-29 21:15:10
archlinux
archlinux
ruby: permissive certificate verification
2015-04-14 00:00:00
cvelist
cvelist
CVE-2015-1855
2019-11-29 20:46:48
amazon
amazon
cloudfoundry
cloudfoundry
CVE-2015-1855 Ruby OpenSSL Hostname Verification | Cloud Foundry
2015-04-30 00:00:00
suse
suse
Security update for ruby2.1 (important)
2017-04-20 12:08:57
Security update for ruby2.1 (important)
2017-04-28 18:11:28
ubuntu
ubuntu
Ruby vulnerabilities
2017-07-25 00:00:00