CVE-2015-3886

Critical

Published: 21/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

libinfinity versions before 0.6.6-1 do not validate expired SSL certificates, allowing remote attackers to have unspecified impact via unknown vectors.

Risk Assessment

The lack of validation for expired SSL certificates may lead to serious security vulnerabilities, enabling attackers to perform man-in-the-middle attacks.

Recommendation

It is recommended to update libinfinity to version 0.6.6-1 or later to ensure proper SSL certificate validation.

Original NVD description (English source)

libinfinity before 0.6.6-1 does not validate expired SSL certificates, which allows remote attackers to have unspecified impact via unknown vectors.