CVE-2015-1793
Fixed in a distro release EPSS 58%
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate chains, which allows remote attackers to spoof a Certification Authority role and trigger unintended certificate verifications via a valid leaf certificate.
Products: oracle supply_chain_products_suite, oracle jd_edwards_enterpriseone_tools, openssl, oracle opus_10g_ethernet_switch_family
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openssl | 1.0.2d-1 |
| Debian 13 | openssl | 1.0.2d-1 |
| Debian 14 | openssl | 1.0.2d-1 |
| SUSE Linux Enterprise Desktop 11 SP3 | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Desktop 11 SP4 | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Server 11 SP3 | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Server 11 SP3-TERADATA | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Server 11 SP4 | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP3 | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP3 | mysql | 5.5.46-0.14.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | mysql | 5.5.46-0.14.1 |
| openSUSE Tumbleweed | openssl-1_1 | 1.1.1l-1.2 |