NVD

Id
24033  
Name
CVE-2015-1793  
Description
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-07-09  
Modified Date
2016-12-27  
Seq
2015-1793  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
127460 24033 CVE-2015-1793 http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery  View
127461 24033 CVE-2015-1793 NetBSD-SA2015-008  View
127462 24033 CVE-2015-1793 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694  View
127463 24033 CVE-2015-1793 FEDORA-2015-11414  View
127464 24033 CVE-2015-1793 FEDORA-2015-11475  View
127465 24033 CVE-2015-1793 SSRT102180  View
127466 24033 CVE-2015-1793 HPSBGN03424  View
127467 24033 CVE-2015-1793 http://openssl.org/news/secadv_20150709.txt  View
127468 24033 CVE-2015-1793 20150710 OpenSSL Alternative Chains Certificate Forgery Vulnerability (July 2015) Affecting Cisco Products  View
127469 24033 CVE-2015-1793 http://www.fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery  View
127470 24033 CVE-2015-1793 http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html  View
127471 24033 CVE-2015-1793 http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html  View
127472 24033 CVE-2015-1793 http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html  View
127473 24033 CVE-2015-1793 http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html  View
127474 24033 CVE-2015-1793 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
127475 24033 CVE-2015-1793 http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html  View
127476 24033 CVE-2015-1793 75652  View
127477 24033 CVE-2015-1793 91787  View
127478 24033 CVE-2015-1793 1032817  View
127479 24033 CVE-2015-1793 SSA:2015-190-01  View
127480 24033 CVE-2015-1793 http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454058.htm  View
127481 24033 CVE-2015-1793 https://git.openssl.org/?p=openssl.git;a=commit;h=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8  View
127482 24033 CVE-2015-1793 https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825  View
127483 24033 CVE-2015-1793 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763  View
127484 24033 CVE-2015-1793 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351  View
127485 24033 CVE-2015-1793 https://kc.mcafee.com/corporate/index?page=content&id=SB10125  View
127486 24033 CVE-2015-1793 GLSA-201507-15  View
127487 24033 CVE-2015-1793 FreeBSD-SA-15:12  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8167 JVNDB-2015-003487 OpenSSL に証明書チェーンの検証不備の脆弱性 OpenSSL には、証明書チェーンの検証不備の脆弱性が存在します。 CVE-2015-1793 79018 CVE-2015-1793 24033 6.4 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003487.html 2015-07-09 2016-11-22 View