| Package | Affected versions | Patched versions |
|---|---|---|
| nginx | ≥ 0.5.6, < 1.6.2≥ 1.7.0, < 1.7.5 | 1.6.21.7.5 |
nginx 0.5.6 through 1.7.4, when using the same shared ssl_session_cache or ssl_session_ticket_key for multiple servers, can reuse a cached SSL session for an unrelated context, which allows remote attackers with certain privileges to conduct "virtual host confusion" attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free