Vulnerability in OpenSSL
CVE-2015-1793
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.584 (99.1th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.712 · newest: 0.584 · change: -0.127
Affected products
- OpenSSL — versions 1.0.1n, 1.0.1o, 1.0.2b
- Oracle Jd Edwards Enterpriseone Tools — versions 9.1, 9.2
- Oracle Opus 10g Ethernet Switch Family
- Oracle Supply Chain Products Suite — versions 6.1.2.2, 6.1.3.0, 6.2.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- marc.info/ (vendor-advisory)
- h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay
- www.securitytracker.com/id/1032817 (vdb-entry)
- www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html
- security.gentoo.org/glsa/201507-15 (vendor-advisory)
- www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454…
- www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html (Patch)
- www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html (Patch)
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710… (vendor-advisory)
- git.openssl.org/
Frequently asked questions
- What is CVE-2015-1793?
- CVE-2015-1793 is a medium-severity vulnerability in OpenSSL, classified under CWE-254. CVSS score: 6.5/10. Published 2015-07-09.
- How severe is CVE-2015-1793?
- Medium severity. CVSS v3 base score is 6.5 out of 10.
- Is CVE-2015-1793 known to be exploited?
- 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.