CVE - CVE - 2015 - 1793

CVE-ID
cve - 2015 - 1793	了解更多国家漏洞数据库(NVD) •CVSS严重性评级•修复信息•••CPE SCAP映射脆弱的软件版本信息
描述
在加密/ x509 / x509_vfy X509_verify_cert函数。c在OpenSSL 1.0.1n 1.0.1o、1.0.2b 1.0.2c期间不妥善处理x基本约束cA值识别替代证书链,它允许远程攻击者欺骗一个证书颁发机构的角色,引发意想不到的证书验证通过有效叶证书。
引用
注意:引用为方便读者提供帮助区分漏洞。并不是完整列表。
报价:75652 URL: http://www.securityfocus.com/bid/75652 报价:91787 URL: http://www.securityfocus.com/bid/91787 思科:20150710 OpenSSL连锁替代证书伪造脆弱性影响思科产品(2015年7月) URL: http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco - sa - 20150710 - openssl 确认:http://fortiguard.com/advisory/2015 - 07 - 09年cve - 2015 - 1793 - openssl -选择-链- -伪造证书确认:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10694 确认:http://openssl.org/news/万博下载包secadv_20150709.txt 确认:http://www.fortiguard.com/advisory/2015 - 07 - 09年cve - 2015 - 1793 - openssl -选择-链- -伪造证书确认:http://www.oracle.com/technetwork/security - advisory/cpuapr2016v3 - 2985753. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpujul2016 - 2881720. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2016 - 2881722. - html 确认:http://www.oracle.com/technetwork/security - advisory/cpuoct2017 - 3236626. - html 确认:http://www.oracle.com/technetwork/topics/security/bulletinjul2015 - 2511963. - html 确认:http://www.oracle.com/technetwork/topics/security/cpujan2016 - 2367955. - html 确认:http://www.oracle.com/technetwork/topics/security/cpuoct2015 - 2367953. - html 确认:http://www1.huawei.com/en/security/psirt/security - bulletins/security advisories/hw - 454058. - htm 确认:https://git.openssl.org/?p=openssl.git; a0db453ba017ebcaccbee933ee6511a9ae4d1c8 =提交;h = 9 确认:https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04822825 确认:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05045763 确认:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05184351 确认:https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare +数据+中心+手术+软件+漏洞修复确认:https://kc.mcafee.com/corporate/index?page=content&id=SB10125 EXPLOIT-DB: 38640 URL: https://www.exploit-db.com/exploits/38640/ FEDORA: FEDORA - 2015 - 11414 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161747.html FEDORA: FEDORA - 2015 - 11475 URL: http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161782.html FREEBSD: FreeBSD-SA-15:12 URL: https://www.freebsd.org/security/advisories/FreeBSD-SA-15:12.openssl.asc GENTOO: glsa - 201507 - 15所示 URL: https://security.gentoo.org/glsa/201507-15 惠普:HPSBGN03424 URL: http://marc.info/?l=bugtraq&m=144370846326989&w=2 惠普:HPSBUX03388 URL: http://marc.info/?l=bugtraq&m=143880121627664&w=2 惠普:SSRT102180 URL: http://marc.info/?l=bugtraq&m=143880121627664&w=2 NETBSD: NETBSD - sa2015 - 008 URL: http://ftp.netbsd.org/pub/netbsd/security/advisories/netbsd txt.asc——sa2015 - 008. SECTRACK: 1032817 URL: http://www.securitytracker.com/id/1032817 SLACKWARE: SSA: 2015-190-01 URL: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.561427
分配中央社
红帽公司。
创建日期记录
20150217	免责声明:记录创建日期可能反映了CVE ID分配或保留的时候,,不一定表示当发现了这个漏洞,与受影响的供应商,在CVE公开披露,或更新。
阶段(遗留)
分配(20150217)
票(遗留)

评论(遗留)

提出(遗留)
N /一个
这是一个记录CVE列表,它提供了共同的标识符公开已知的网络安全漏洞。
CVE使用关键字搜索: 你也可以搜索参考使用CVE参考地图。
更多信息:CVE请求Web表单(从下拉框中选择“其他”)

回到顶部

cve - 2015 - 1793