{"id":"CVE-2015-1793","aliases":["BELL-CVE-2015-1793","DEBIAN-CVE-2015-1793","EUVD-2015-1919","GHSA-4j29-v246-6w5w","MGASA-2015-0274","SUSE-SU-2015:2303-1","UBUNTU-CVE-2015-1793","openSUSE-SU-2024:10200-1","openSUSE-SU-2024:10271-1","openSUSE-SU-2024:10529-1","openSUSE-SU-2024:11127-1"],"status":"published","title":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1...","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.58213,"percentile":0.99098,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-254"],"published":"2015-07-09T00:00:00Z","modified":"2026-09-09T07:00:29Z","exploits":[{"source":"exploitdb","id":"EDB-38640","title":"OpenSSL - Alternative Chains Certificate Forgery","type":"webapps","platform":"multiple","date":"2015-11-05","url":"https://www.exploit-db.com/exploits/38640"},{"source":"metasploit","id":"auxiliary/server/openssl_altchainsforgery_mitm_proxy","title":"OpenSSL Alternative Chains Certificate Forgery MITM Proxy","type":"auxiliary","date":"2015-07-09","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/server/openssl_altchainsforgery_mitm_proxy"}],"fixes":[{"ecosystem":"Debian:12","package":"openssl","fixed_in":["1.0.2d-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openssl","fixed_in":["1.0.2d-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openssl","fixed_in":["1.0.2d-1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"openssl","fixed_in":["1.0.1p-1.mga4"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"openssl","fixed_in":["1.0.2d-1.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2d-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2d-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2d-1"}]}]},{"source":"osv","ecosystem":"Mageia:4","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1p-1.mga4"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"openssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2d-1.mga5"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.46-0.14.1"}]}],"bundled":29},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openssl-1_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1l-1.2"}]}],"bundled":136}],"products":[{"vendor":"openssl","product":"openssl"},{"vendor":"oracle","product":"jd_edwards_enterpriseone_tools"},{"vendor":"oracle","product":"opus_10g_ethernet_switch_family"},{"vendor":"oracle","product":"supply_chain_products_suite"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=143880121627664\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securitytracker.com/id/1032817","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://security.gentoo.org/glsa/201507-15","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-454058.htm","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150710-openssl","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","web"]},{"url":"https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.freebsd.org/security/advisories/FreeBSD-SA-15:12.openssl.asc","tags":["vendor-advisory","x_refsource_FREEBSD","x_transferred","advisory"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161747.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/topics/security/bulletinjul2015-2511963.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://openssl.org/news/secadv_20150709.txt","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://marc.info/?l=bugtraq\u0026m=144370846326989\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161782.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10125","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.fortiguard.com/advisory/2015-07-09-cve-2015-1793-openssl-alternative-chains-certificate-forgery","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://www.securityfocus.com/bid/91787","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/75652","tags":["vdb-entry","x_refsource_BID","x_transferred","web"]},{"url":"http://kb.juniper.net/InfoCenter/index?page=content\u0026id=JSA10694","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"https://www.exploit-db.com/exploits/38640/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","web"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2015\u0026m=slackware-security.561427","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","web"]},{"url":"http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2015-008.txt.asc","tags":["vendor-advisory","x_refsource_NETBSD","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1793"},{"url":"https://git.openssl.org/?p=openssl.git;a=commit;h=9a0db453ba017ebcaccbee933ee6511a9ae4d1c8"},{"url":"https://www.exploit-db.com/exploits/38640"},{"url":"https://github.com/advisories/GHSA-4j29-v246-6w5w"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2015-1793","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-1793","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2015-0274.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16333","tags":["report"]},{"url":"https://www.openssl.org/news/secadv_20150709.txt","tags":["web","report"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152303-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/951391","tags":["report"]},{"url":"https://bugzilla.suse.com/952196","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0286","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4730","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4766","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4816","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4819","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4833","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4858","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4862","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4866","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4870","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4879","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4890","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4895","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4905","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4913","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-1793","tags":["report"]},{"url":"https://mta.openssl.org/pipermail/openssl-announce/2015-July/000037.html","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1793","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-7247","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4019","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-4030","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1976","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2582","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3194","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4767","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4769","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4771","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4772","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0546","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0594","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0608","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0610","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0611","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0641","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0650","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0655","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0661","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0666","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0668","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0705","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2047","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3492","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3614","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5584","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5609","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5612","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5616","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5617","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5630","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6662","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8283","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-7250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-5077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0789","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-1387","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-0742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-1633","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-3864","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2010-5298","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-0014","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-3210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4577","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0027","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0884","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-1165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2110","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2686","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4929","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0169","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4353","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-6450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0076","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0160","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0221","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3509","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5139","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0289","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0293","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1788","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1790","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1791","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1792","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3193","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0701","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0702","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-0800","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2107","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2176","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2177","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2178","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2179","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2183","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7052","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2937","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-2940","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4343","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3108","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-0891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2008-1672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7055","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7056","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3731","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3736","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-3738","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0732","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0734","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0735","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0737","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-0739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1547","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-23841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3711","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3712","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-1793","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","status":"published","published":"2015-07-09T19:00:00Z","modified":"2024-08-06T04:54:16.256Z","updated_at":"2026-11-02T14:35:43.698357Z"}],"euvd":[{"id":"EUVD-2015-1919","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","status":"published","published":"2015-07-09T19:00:00Z","modified":"2024-08-06T04:54:16Z","updated_at":"2026-11-03T02:22:14.212001Z"}],"ghsa":[{"id":"GHSA-4j29-v246-6w5w","title":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1...","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","status":"published","published":"2022-05-14T01:54:34Z","modified":"2025-04-12T12:50:43Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:01:22.814855Z"}],"nvd":[{"id":"CVE-2015-1793","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","status":"published","published":"2015-07-09T19:17:00.093Z","modified":"2026-06-17T00:23:00.747Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-254"],"updated_at":"2026-11-02T14:03:05.884985Z"}],"osv":[{"id":"BELL-CVE-2015-1793","title":"CVE-2015-1793 does not affect BellSoft software","status":"withdrawn","published":"2015-07-09T19:17:00Z","modified":"2026-01-26T09:47:03.902763Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2015-1793","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","status":"published","published":"2015-07-09T19:17:00Z","modified":"2026-04-16T06:21:45.40067667Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-1793","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","status":"published","published":"2015-07-09T19:17:00.093Z","modified":"2026-09-09T07:00:29.273971223Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-1793","description":"The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.","status":"withdrawn","published":"2015-07-09T00:00:00Z","modified":"2025-07-16T08:11:25.160987Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"MGASA-2015-0274","title":"Updated openssl package fixes security vulnerability","description":"During certificate verification, OpenSSL (starting from version 1.0.1n and\n1.0.2b) will attempt to find an alternative certificate chain if the first\nattempt to build such a chain fails. An error in the implementation of\nthis logic can mean that an attacker could cause certain checks on\nuntrusted certificates to be bypassed, such as the CA flag, enabling them\nto use a valid leaf certificate to act as a CA and \"issue\" an invalid\ncertificate (CVE-2015-1793).\n","status":"published","published":"2015-07-10T08:12:35Z","modified":"2026-04-16T06:24:30.17287557Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10200-1","title":"libmysql56client18-32bit-5.6.34-1.1 on GA media","description":"These are all security issues fixed in the libmysql56client18-32bit-5.6.34-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:16:49.073812Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10271-1","title":"libopenssl-devel-1.0.2j-2.2 on GA media","description":"These are all security issues fixed in the libopenssl-devel-1.0.2j-2.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:27:51.178222Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10529-1","title":"libopenssl1_0_0-steam-1.0.2h-4.1 on GA media","description":"These are all security issues fixed in the libopenssl1_0_0-steam-1.0.2h-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:06:26.599598Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11127-1","title":"libopenssl-1_1-devel-1.1.1l-1.2 on GA media","description":"These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:19.520287Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2015:2303-1","title":"Security update for mysql","description":"The mysql package was updated to version 5.5.46 to fixs several security and non security issues.\n\n- bnc#951391: update to version 5.5.46\n  * changes:\n    http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-46.html\n  * fixed CVEs:\n    CVE-2015-1793, CVE-2015-0286, CVE-2015-0288, CVE-2015-1789,\n    CVE-2015-4730, CVE-2015-4766, CVE-2015-4792, CVE-2015-4800,\n    CVE-2015-4802, CVE-2015-4815, CVE-2015-4816, CVE-2015-4819,\n    CVE-2015-4826, CVE-2015-4830, CVE-2015-4833, CVE-2015-4836,\n    CVE-2015-4858, CVE-2015-4861, CVE-2015-4862, CVE-2015-4864,\n    CVE-2015-4866, CVE-2015-4870, CVE-2015-4879, CVE-2015-4890,\n    CVE-2015-4895, CVE-2015-4904, CVE-2015-4905, CVE-2015-4910,\n    CVE-2015-4913\n- bnc#952196: Fixed a build error for ppc*, s390* and ia64 architectures.\n","status":"published","published":"2015-12-18T15:47:51Z","modified":"2026-02-04T03:30:41.47948Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}