Skip to content
OpenAdvisories
Critical DSA-3253-1 3 CVEs

pound - security update

Published May 7, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 7 pound 2.6-2+deb7u1
Debian · 8 pound 2.6-6+deb8u1

Vulnerabilities 3

  • Critical 9.8
    CVE-2009-3555 Public exploit EPSS 87%

    Apache Tomcat affected by vulnerability in TLS and SSL protocol

    The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Serv…

    openssl apache2 org.apache.tomcat:tomcat nss Debian Maven
  • Low 3.4
    CVE-2014-3566 Public exploit EPSS 100%

    The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which ma…

    openssl openssl openjdk-7 wolfssl Debian Ubuntu
  • Unscored —
    CVE-2012-4929 Public exploit

    The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…

    openssl apache2 nginx lighttpd Debian