{"id":"CVE-2015-3644","aliases":["DEBIAN-CVE-2015-3644","DSA-3299-1","EUVD-2015-3682","GHSA-3w38-w685-6793","MGASA-2015-0289","SUSE-SU-2015:1062-1","UBUNTU-CVE-2015-3644","openSUSE-SU-2024:12196-1"],"status":"published","title":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections...","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","severity":{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0212,"percentile":0.81998,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2015-05-14T00:00:00Z","modified":"2026-09-09T06:47:18Z","fixes":[{"ecosystem":"Debian:12","package":"stunnel4","fixed_in":["3:5.18-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"stunnel4","fixed_in":["3:5.18-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"stunnel4","fixed_in":["3:5.06-2+deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"stunnel","fixed_in":["5.03-4.1.mga5"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12","package":"stunnel","fixed_in":["5.00-3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"stunnel","fixed_in":["5.00-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"stunnel","fixed_in":["5.65-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"stunnel4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:5.18-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"stunnel4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:5.18-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"stunnel4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:5.06-2+deb8u1"}]}],"versions":["3:5.06-2"]},{"source":"osv","ecosystem":"Mageia:5","package":"stunnel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.03-4.1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"stunnel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.00-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"stunnel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.00-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"stunnel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.65-1.1"}]}]}],"products":[{"vendor":"stunnel","product":"stunnel"}],"references":[{"url":"http://www.debian.org/security/2015/dsa-3299","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/74659","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://www.stunnel.org/CVE-2015-3644.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","advisory","fix","report"]},{"url":"http://www.securitytracker.com/id/1032324","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3644"},{"url":"https://github.com/advisories/GHSA-3w38-w685-6793"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3644","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0289.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=15891","tags":["report"]},{"url":"https://www.debian.org/security/2015/dsa-3299","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151062-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/931517","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3644","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-3644","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3644","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-3644","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","status":"published","published":"2015-05-14T00:00:00Z","modified":"2024-08-06T05:47:57.755Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3682","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","status":"published","published":"2015-05-14T00:00:00Z","modified":"2024-08-06T05:47:57Z","updated_at":"2026-11-03T02:22:07.516949Z"}],"ghsa":[{"id":"GHSA-3w38-w685-6793","title":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections...","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","status":"published","published":"2022-05-17T03:14:28Z","modified":"2023-01-27T05:07:19Z","cwes":["CWE-284"],"updated_at":"2026-11-02T14:43:05.912007Z"}],"nvd":[{"id":"CVE-2015-3644","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","status":"published","published":"2015-05-14T00:59:06.147Z","modified":"2026-06-17T00:26:02.117Z","cvss":[{"version":"2.0","score":5.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"CVE-2015-3644","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","status":"published","published":"2015-05-14T00:59:06Z","modified":"2026-04-16T06:22:07.828351123Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3644","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","status":"published","published":"2015-05-14T00:59:06.147Z","modified":"2026-09-09T06:47:18.899175187Z","updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"DSA-3299-1","title":"stunnel4 - security update","status":"published","published":"2015-07-02T00:00:00Z","modified":"2026-03-09T01:17:50.861807Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"MGASA-2015-0289","title":"Updated stunnel package fixes security vulnerability","description":"Johan Olofsson discovered an authentication bypass vulnerability in\nStunnel, a program designed to work as an universal SSL tunnel for network\ndaemons. When Stunnel in server mode is used with the redirect option and\ncertificate-based authentication is enabled with \"verify = 2\" or higher,\nthen only the initial connection is redirected to the hosts specified with\n\"redirect\". This allows a remote attacker to bypass authentication\n(CVE-2015-3644).\n","status":"published","published":"2015-07-27T17:45:18Z","modified":"2026-04-16T06:25:48.343447118Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:12196-1","title":"stunnel-5.65-1.1 on GA media","description":"These are all security issues fixed in the stunnel-5.65-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:53:15.628825Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2015:1062-1","title":"Security update for stunnel","description":"\nThis update fixes an authentication bypass when using\nthe 'redirect' option (CVE-2015-3644, bsc#931517, backport from v5.17).\n","status":"published","published":"2015-05-27T12:15:01Z","modified":"2026-02-04T04:11:21.590559Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"UBUNTU-CVE-2015-3644","description":"Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server after the initial connection, which allows remote attackers to bypass authentication.","status":"withdrawn","published":"2015-05-14T00:59:00Z","modified":"2025-07-16T07:32:56.527991Z","updated_at":"2026-11-02T15:54:10.045446Z"}]}}