What’s Vulnerable › Vulnerabilities

CVE-2015-3886

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-21 · updated 2026-06-17
• Weakness: CWE-295

Description

libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.

Affected products

• Libinfinity Project Libinfinity: through 0.6.6

References

• http://seclists.org/oss-sec/2015/q2/410
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783601
• https://bugzilla.redhat.com/show_bug.cgi?id=1221266
• https://github.com/gobby/gobby/issues/61
• https://github.com/gobby/libinfinity/commit/c97f870f5ae13112988d9f8ad464b4f679903706
• http://seclists.org/oss-sec/2015/q2/410
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783601
• https://bugzilla.redhat.com/show_bug.cgi?id=1221266
• https://github.com/gobby/gobby/issues/61
• https://github.com/gobby/libinfinity/commit/c97f870f5ae13112988d9f8ad464b4f679903706

Get alerted when CVE-2015-3886 or the next vulnerability affects your stack